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Abstract 


Distributed systems are systems composed of multiple communicant processes cooperating 
to solve a common task. This is a generic model for numerous real systems as wired or mobile 
networks, shared-memory multiprocessor systems, and so on. From an algorithmic point of view, 
it is well-known that strong assumptions (as asynchronism or mobility) on such systems lead often 
to impossibility results or high lower bounds on complexity. In this thesis, we study algorithms 
that adapt themselves to their environment (i.e., the union of all assumptions on the system) 
by focusing on the two following approaches. Graceful degradation circumvents impossibility 
results by degrading the properties offered by the algorithm as the environment becomes stronger. 
Speculation allows to bypass high lower bounds on complexity by optimizing the algorithm only 
on more probable environments. 

Robot networks are a particular case of distributed systems where processes are endowed with 
sensors and able to move from a location to another. We consider dynamic environments in which 
this ability may evolve with time. This thesis answers positively to the open question whether 
it is possible and attractive to apply gracefully degrading and speculative approaches to robot 
networks in dynamic environments. This answer is obtained through contributions on gracefully 
degrading gathering (where all robots have to meet on the same location in finite time) and on 
speculative perpetual exploration (where robots must visit infinitely often each location). 




Resume 


Les systemes distribues sont des systemes composes de plusieurs processus communiquants 
et cooperants ensemble pour resoudre des taches communes. C’est un rnodele generique pour de 
nombreux systemes reels comrne les reseaux sans fil ou mobiles, les systemes multiprocesseurs 
a memoire partagee, etc. D’un point de vue algorithmique, il est reconnu que de fortes hy¬ 
potheses (comme l’asynchronisme ou la mobilite) sur de tels systemes rnenent souvent a des 
resultats d’impossibilite ou a de fortes bornes inferieures sur les complexites. Dans cette these, 
nous etudions des algorithmes qui s’auto-adaptent a leur environnement (i.e., l’union de toutes 
les hypotheses sur le systeme) en se concentrant sur les deux approches suivantes. La degrada¬ 
tion progressive contourne les resultats d’impossibilite en degradant les proprietes offertes par 
l’algorithme lorsque l’environnement devient fort. La speculation contourne les bornes inferieures 
elevees sur les complexites en optimisant l’algorithme seulement sur les environnements les plus 
probables. 

Les reseaux de robots represented un cas particular des systemes distribues ou les processus, 
dotes de capteurs, sont capables de bouger d’une localisation a une autre. Nous considerons des 
environnements dynamiques dans lesquels cette capacite peut evoluer avec le temps. Cette these 
repond positivement a la question ouverte de savoir s’il est possible et benefique d’appliquer 
les approches progressivement degradante et speculative aux reseaux de robots dans des envi¬ 
ronnements dynamiques. Cette reponse est obtenue en etudiant le rassemblement (ou tous les 
robots doivent se retrouver a la rnerne localisation en temps fini) progressivement degradant et 
l’exploration perpetuelle (ou les robots doivent visiter infiniment souvent chaque localisation) 
speculative. 
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Context 
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Chapter 1 


Introduction 


Contents 

1.1 Robot Networks in Dynamic Environments. 5 

1.2 Contributions and Outline of the Thesis. 6 


In this thesis, we study systems that are composed of multiple processes able to communicate 
together. Such systems are said to be distributed. Each process of a distributed system executes a 
(local) algorithm (i.e., ordered sequence of instructions) in an uncoordinated manner, i.e., with¬ 
out the help of any central entity. A distributed algorithm is the set of all the local algorithms of 
the entities of a distributed system. 

Distributed systems are opposed to centralized systems in which only one entity has a global 
view of the system and makes all the decisions. In distributed systems, all the processes make 
their own decisions based on their own partial knowledge of the system. They have their own 
clock, and compute at their own speed. In order to solve problems, the processes have to coop¬ 
erate all together even though they have not the same perception of time, the same vision of the 
system... 

Even if their design may be tricky on various aspects, in particular the difficulty of synchro¬ 
nizing local algorithms, distributed systems present some advantages. Indeed, the processes can 
proceed in parallel, making tasks executions faster than if they were performed by a single pro¬ 
cess. Besides, since there are multiple processes to execute a task, it is possible to tolerate faults: 
if one of the processes stops to execute its algorithm correctly it could still be possible for the 
problem to be solved. 

A distributed system is a general model that permits to represent various real systems like 
phone networks, transportation networks, internet. There exist multiple assumptions that can 
be made on a distributed system to represent all those various real systems: Are the entities syn¬ 
chronous (their computational speed is bounded) or are they asynchronous (their computational 
speed is finite but not bounded)? Are the entities able to communicate? How do they communi¬ 
cate (thanks to shared memory or thanks to messages sent)? Are the entities able to communicate 
synchronously (the time to route the messages is bounded) or asynchronously (the time to route 
the messages is finite but unbounded)? Can entities be subject to faults? Is the graph of com¬ 
munication of the entities represented thanks to a static graph or a dynamic graph (where edges 
model the possibility for two entities to communicate, and may appear and disappear with time)? 

An environment corresponds to the set of assumptions that are made on a distributed sys¬ 
tem. Some environments are harder than others: for instance an environment composed of asyn¬ 
chronous entities is harder than the same environment where the entities are synchronous. When 
an environment is too harsh, some problems become impossible to solve or lower bounds (i.e., 
the minimum performance according to some metrics like time used, memory used, number of 
messages sent, etc., necessary to solve a problem) to solve some problems increase. For instance, 
the consensus problem (where processes have to decide irrevocably, in finite time, the same value 
among a set of values initially proposed by each of the processes) is impossible when the processes 
are asynchronous and may stop the execution of their algorithm [ 82 ]. 

While considering distributed algorithms the classical approach is to analyze the feasibility 
of problems, i.e., determine the environments in which the problems studied are solvable and the 
ones in which they are impossible to solve. Once these environments have been determined, the 
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classical approach consists in finding at least one algorithm per environment where the problems 
are solvable and this preferably with good performance (like good time complexity). An algo¬ 
rithm conceived in a particular environment does not guarantee any correct behavior or good 
performances when executed in another environment. This approach may be restrictive, e.g., in 
a context where we cannot know in advance in which environment the algorithm will be actually 
executed. This is particularly true when the algorithm is executed in an environment that may 
change with time, like for instance an environment where processes may be synchronous at some 
time and asynchronous at some other time or an environment that is more or less dynamic (i.e., 
the frequency of the appearance and disappearance of the edges of the graph of communication 
of the processes are more or less high) depending on the time. 

In this thesis, we adopt an alternative approach by studying algorithms that are self-adaptive 
to the environment in which they are executed. We focus on two such approaches: the indul¬ 
gence/graceful degradation and the speculation that we describe below. 

Indulgent/Gracefully degrading algorithms. Indulgent algorithms [5, 118, 131] and grace¬ 
fully degrading algorithms [20] (that we define afterwards) share the same underlying idea but 
applied to different environments: indulgent algorithms focus on environments in which only 
the synchronicity changes, while gracefully degrading algorithms focus on environments in which 
only the dynamics of the system change. When such algorithms are executed in an environment 
in which the problem studied is unsolvable, they obviously do not solve the problem itself but 
guarantee a best effort strategy. Indeed, they guarantee that as long as the conditions of the 
system are not suitable to solve the problem then they solve a degraded version of it. 

For instance, Biely et al. [20] presented a gracefully degrading algorithm that solves the 
consensus problem in systems where the connectivity assumptions of the graph of communication 
are strong (the edges are frequently present), and that gracefully degrades to k-set agreement 
(where processes have to decide irrevocably, in finite time, k values among a set of values initially 
proposed by each of the processes) when the connectivity between the communicating processes 
decreases and makes the consensus problem impossible. 

More precisely, indulgent/gracefully degrading algorithms solve the problem V studied when 
they are executed in some environments in which this problem is solvable and they solve weaker 
problems than V otherwise. In distributed computing, the definitions of problems are generally 
decomposed into a safety and a liveness property. Intuitively, according to Lamport [117] “a 
safety property is one which states that something will not happen” and “a liveness property 
is one which states that something must happen.” The problems weaker than V, solved by an 
indulgent/gracefully degrading algorithm, may ensure the safety of V to preserve the essence of 
this problem. 

These approaches are a way to circumvent impossibility results that occur in some envi¬ 
ronments since indulgent/gracefully degrading algorithms provide a best effort solution to the 
problem when executed in an environment in which the problem is unsolvable. Such algorithms 
are also useful when the environment of the system in which they will be executed is not known 
in advance, or when the environment may evolve with time since they will adapt to these changes 
without any external help by providing the best possible properties in each environment. 

Speculative algorithms. In distributed computing, the classical approach to evaluate the ef¬ 
ficiency of an algorithm is to consider the worst case in order to provide upper bound (i.e., the 
maximum performance according to some metrics like time used, memory used, number of mes¬ 
sages sent, etc., necessary to solve a problem) for any possible execution in a given environment. 
The speculative approach [114, 77, 9] is based on the observation that the worst environment pos¬ 
sible in which a problem is solvable is not always the most frequent one. When the environments 
in which the algorithms are more often executed do not correspond to the worst case possible, 
the classical worst-case approach may provide upper bounds that are very far from the “practical” 
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ones. To alleviate this problem, the speculative approach consists in optimizing the algorithms 
in the most frequent environment in which they will be executed. Note that the analysis of the 
efficiency of a speculative algorithm is still with respect to the worst case in order to provide an 
upper bound for any execution in the most probable actual environment. 

More precisely, speculative algorithms solve the problem studied in any environment in which 
they are susceptible to be executed but also they are more efficient when executed in the environ¬ 
ments that are more probable in practice. The optimization provided by a speculative algorithm 
is, depending on the context, on time complexity, memory, number of exchanged messages, ... 

This approach is a way to circumvent important lower bounds obtained in some rare environ¬ 
ments since speculative algorithms provide an optimized solution to the problem when executed 
in environments in which the problem is frequently executed (i.e., the upper bound obtained in 
the most frequent environments is lower than the lower bound obtained while considering all the 
possible executions). 

1.1 Robot Networks in Dynamic Environments 

In this thesis, we are interested in robot networks [136], i.e., networks made of moving pro¬ 
cesses endowed with sensors to sense their environment. We consider cohort of robots with few 
capacities. Numerous potential applications exist for such multi-robot systems: surrounding, 
patrolling, exploration of various environments, etc., moving and sensory capabilities are key in¬ 
gredients of such distributed systems to achieve collaborative tasks. In this thesis, we consider 
distributed systems with assumptions and robot capabilities as weak as possible to determine the 
feasibility of some problems in given settings. 

A first “natural” approach when studying robot networks is to consider robots evolving in the 
continuous space [45, 72, 139, 123]. A second approach consists of discrete environments modeled 
by static graphs where nodes represent the locations where the robots may be located and edges 
represent the possibility for a robot to move from one location to another one [85, 17, 64, 69]. 

However all the environments are not static: some environments are dynamic and may be 
represented by dynamic graphs in which nodes and edges may appear and disappear with time. 
Indeed, dynamic graphs are useful to represent unstable environments that may change over time, 
like for instance, a transportation network, a building in which doors are closed and open over 
time, or streets that are closed over time due to work in process or traffic jam in a town. 

In this thesis, we consider robots evolving in dynamic graphs composed of a fixed set of nodes 
that model the locations where robots may be located, and a set of edges that may appear and 
disappear with time and represent the possibility for a robot to move from one location to another 
one at a given time. 

There exist multiple systems that can be modeled thanks to dynamic graphs, all these systems 
do not have the same connectivity over time (i.e., frequencies of appearance and disappearance 
of the edges). For instance, public transportation networks have a periodic connectivity that 
is induced by the movements of the transporters while phone networks have an uncontrolled 
connectivity. Hence, to represent the different connectivity assumptions, there exist different 
classes of dynamic graphs [40, 38]. 

When speed and scheduling of topological changes vary, some problems become impossible or 
lower bounds to solve some problems increase. This motivates gracefully degrading and specula¬ 
tive approaches. 

Problematic of the thesis. As the gracefully degrading and speculative approaches have 
never been applied to robot networks, the objective followed in this thesis is to determine whether 
it is tractable and worthwhile to do so. 

Indeed, the strong restrictions of this original model do not speak in favor of a positive answer 
at first glance. In particular, in a traditional distributed system, processes exchange information 
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by sending messages (that may be duplicated to overcome temporary or permanent edge absence 
without any impact on the ongoing behavior of processes) whereas robots have to move to com¬ 
municate (directly or not) with each other (without the ability to duplicate themselves leading to 
the necessity to manage cautiously the robots moves according to the dynamics of the environ¬ 
ment). Hence, designing an algorithm for a robot network able to adapt to several environments 
seems to be a challenging task. 

The contribution of this thesis is to overcome this challenge and to provide a positive answer 
to this question by focusing on two classical problems of the literature: the gathering (in which 
all the robots have to be located in finite and bounded time on the same node of the graph) and 
the perpetual exploration (in which all the nodes of the graph have to be visited infinitely often 
by at least one robot) problems. 

1.2 Contributions and Outline of the Thesis 

In this section, we present for each part presented in this thesis its outline as well as the 
contributions detailed in it. 

Context. We present in Part I the background needed to understand this thesis. 

More precisely, in Chapter 2, we describe different representations of dynamic graphs, the 
generalization of the notion of path in static graphs to dynamic graphs, and then based on this 
notion, we present the hierarchy of classes of dynamic graphs of Casteigts et al. [40, 38] that 
permit to compare them. Finally, we present the model of dynamic graphs we use in this thesis. 

Chapter 3 is a chapter dedicated to the presentation of robots. In this chapter, we detail 
the computational model of the robots, the different environments in which they may evolve 
(continuous space, static graphs, dynamic graphs), the different capacities they may be endowed 
with, and the classical problems that are solved using robots. Finally, we present the model of 
robots used in this thesis. 

The main definitions explaining algorithms and impossibility results for robots evolving in 
dynamic graphs are given in Chapter 4. In this chapter, we also present a general framework 
introduced by Braud-Santoni et al. [34] that helps to prove impossibilities results in dynamic 
graphs. 

Graceful degradation. Part II presents our first contribution of this thesis: we show that 
it is possible to apply the gracefully degrading approach to robot networks. This is done by 
studying the gathering problem in dynamic rings. This problem is impossible to solve in highly 
dynamic rings (dynamic rings in which at most one edge may be missing forever from a given 
time); therefore it represents a good case study for the graceful degradation. 

In Chapter 5, we give a formal definition of the gracefully degrading notion applied to robots 
evolving in dynamic graphs. Then we describe the related work that adopts an indulgent or a 
gracefully degrading approach. None of these algorithms consider robots evolving in dynamic 
graphs. We decide to apply a gracefully degrading approach to robot networks evolving in dy¬ 
namic graphs in studying the gathering problem since this problem is impossible to solve in 
highly dynamic graphs. Finally, we present articles dealing with the gathering problem in dy¬ 
namic graphs. 

Then Chapter 6, provides a gracefully degrading gathering algorithm. This algorithm solves 
the gathering problem in dynamic graphs where this problem is solvable, and degrades it (solves 
weaker versions of the gathering problem) when it is executed in dynamic graphs in which the 
gathering problem is not solvable. The degradation we propose is done on the liveness of the 
problem, not on its safety. The safety of the gathering problem imposes that all robots that 
terminate do so on the same node, and the liveness imposes that every robot terminates in finite 
and bounded time. In the degradation we propose the liveness is weakened such that at most one 
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robot may not terminate or (not exclusively) all robots that terminate do so eventually (and not 
in a bounded time). Note that it is the same algorithm that is executed in each of the dynamics 
possible, and that our algorithm has no means to detect the dynamics in which it is executed. 

Finally, Chapter 7 concludes the part indicating some interesting perspectives to this study. 
In particular, we extend the notion of gracefully degrading algorithms: we present optimum 
gracefully degrading algorithms which are gracefully degrading algorithms that provide the best 
version of the problem considered in the environments in which they are executed. 

Speculation. Part III gives our second contribution of this thesis: it is possible to apply the 
speculative approach to robot networks. This is shown thanks to the study of the perpetual 
exploration problem in dynamic graphs. 

In Chapter 8, we propose a formal definition of the speculative notion applied to robots evolv¬ 
ing in dynamic graphs. Then we describe the related work that adopts a speculative approach. 
None of these algorithms use robots evolving in dynamic graphs. To extend speculation to robot 
networks evolving in dynamic graphs, we decide to study the exploration problem. Finally, we 
present articles dealing with the exploration problem in dynamic graphs. 

In Chapter 9, we first characterize the necessary and sufficient number of (non-faulty) robots 
that permit to solve the perpetual exploration problem in highly dynamic rings. While studying 
the sufficiency, we provide a speculative algorithm. This algorithm is speculative considering the 
cover time which is the worst time of the minimal time taken by the robots to explore at least 
once each node of the ring from any time in all the possible executions of their algorithm. Indeed, 
it solves the perpetual exploration problem in an unbounded cover time in highly dynamic rings, 
but in a bounded and asymptotically optimal cover time in static rings. 

As indicated, we consider robots with few capacities. However, even when considering robots 
with very few capacities, it is still possible to have some robots that are subject to faults. In 
this thesis, we particularly study robots subject to transient faults which are arbitrary faults 
such that there exists a time from which these faults do not occur anymore. Algorithms that 
tolerate transient faults are called self-stabilizing algorithms. When a self-stabilizing algorithm 
uses robots, they are called self-stabilizing robots. Self-stabilizing algorithms are very powerful 
algorithms since they solve the problem studied even after the occurrence of very important 
damages in the system. Note that there is no self-stabilizing algorithm solving the exploration 
problem neither in static nor in dynamic graphs. 

In Chapter 10, we perform a similar study as in Chapter 9 but considering self-stabilizing 
robots. Indeed, we characterize the necessary and sufficient number of self-stabilizing robots that 
permit to solve the perpetual exploration problem in highly dynamic rings; and while analyzing 
the sufficiency, we provide a speculative algorithm that solves the perpetual exploration problem 
with an unbounded cover time in highly dynamic rings and with a bounded and asymptotically 
optimal cover time in static rings. 

Chapter 11 concludes Part III, giving a generalization of our work on the perpetual explo¬ 
ration problem in highly dynamic rings to any highly dynamic graphs, and presenting some inter¬ 
esting future work to do. In particular, we extend the notion of speculative algorithms: we present 
optimum speculative algorithms which are speculative algorithms whose complexities reach the 
lower bounds for the problem considered in the environments in which they are executed. 

Conclusion of the Thesis. Chapter 12 concludes the thesis giving an overview of the main 
results. In particular the goal of this thesis was to determine whether gracefully degrading and 
speculative approaches could be applied to robot networks evolving in dynamic graphs, and we 
answered positively to this question, defining these notions formally in this precise context, and 
presenting two study cases: the gathering and the exploration problem in dynamic graphs. Then 
we detail the perspectives to accomplish which basically consist in finding new complexity mea¬ 
sures to apply to robot networks evolving in dynamic graphs to improve the conception of spec- 
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ulative algorithms using robots evolving in dynamic graphs. 

Appendix. In Chapter A we give an overview of another work we did that is related to robot 
networks but that is not related to the gracefully degrading or the speculative approaches. This 
work deals with the approach problem which consists for two robots evolving in the plane, en¬ 
dowed with a limited visibility range, to be located, in finite time, in the range of vision of each 
other. We provide a polynomial solution (in terms of movements) to this problem while consid¬ 
ering asynchronous robots endowed with few capacities to orient themselves in the plane. 

Finally, in Chapter B, we give a French summary of the thesis. 

Publications. Results developed in this thesis have been published in various forums. The 
gracefully degrading gathering algorithm presented in Chapter 6 appeared in the proceedings 
of International Symposium on Stabilization, Safety, and Security of Distributed Systems 2018 
[31]. The speculative perpetual exploration algorithm using non-faulty robots detailed in Chap¬ 
ter 9 has been published in the proceedings of IEEE International Conference on Distributed 
Computing Systems 2017 [29], and in rencontres francophones sur les Aspects Algorithmiques des 
Telecommunications 2017 [30]. The self-stabilizing speculative perpetual exploration algorithm 
described in Chapter 10 has been published in the proceedings of International Symposium on 
Stabilization, Safety, and Security of Distributed Systems 2016 [27], and in Theoretical Computer 
Science [28]. 

The work sketched in Chapter A has been published in the proceedings of International Sym¬ 
posium on Distributed Computing 2017 [22], in Distributed Computing [24] and in rencontres 
francophones sur les Aspects Algorithmiques des Telecommunications 2018 [23]. 
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Few decades ago, most of distributed systems were modeled thanks to static graphs where 
the nodes represent the processes and the edges represent the possibility for a process to commu¬ 
nicate with another one. Similarly, when considering robot networks, generally robots evolve in 
static graphs where the nodes represent the locations where robots may be located and the edges 
represent the possibility for a robot to move from one location to another one. 

However, nowadays, there are more and more mobile processes. Hence, the communications 
are not all static. Indeed, for instance, when two processes roll away, their wifi communications 
may be lost. Similarly, nodes are not always connected, some nodes may be disconnected at some 
times. Likewise, the environments in which robots evolve are not all static. Indeed, it is possible 
for robots to move in environments that vary with time. For instance, robots may evolve in an 
environment modeled by a graph, where the edges represent roads that are closed and opened 
depending on the traffic jam or work in process. We can also model robots moving in a subway, 
the edges of the graph in this case represent the metro going from one station to another one. It 
is also possible for robots to evolve in an environment in which a disaster has occurred, and where 
the locations where the robots may be located and the roads they may borrow are unstable and 
may be sometimes inaccessible. Hence, robots may evolve in many environments changing with 
time. In conclusion, static graphs are not sufficient to model all the possible systems. 

To model all these dynamic systems, multiple models of dynamic graphs have been introduced 
depending on what evolves with time (nodes, edges, both, etc.). The challenge is to formally 
generalize well-known definitions of static graphs that are no longer well defined for dynamic 
graphs (like for instance a path). In this chapter, we first present, in Section 2.1, different models 
and dynamics of graphs. Then, in Section 2.2, we describe our model. 


2.1 State of the Art 

Dynamic graphs have been studied by multiple authors. Multiple models have been defined 
to represent them. We give, in Section 2.1.1, some of these representations. Then, in Section 2.1.2 
we present a hierarchy that classifies the dynamic graphs depending on their dynamics. 

2.1.1 Repesentations of Dynamic Graphs 

In this section, we present some representations used to model dynamic graphs. We only 
present the models of dynamic graphs that are general and may be used in various contexts. For 
instance, among the models we do not present here, there is the PV-graph model [89] which can 
represent only dynamic graphs where each edge appears periodically (refer to Section 8.2.1 for 
more details about this model). 
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Temporal network. Kempe et al. [112] introduce the term temporal networks to define dy¬ 
namic graphs. A temporal graph is a dynamic graph (G, A) where A is a function that associates 
to each edge multiple reals corresponding to the time at which the two extremities of this edge 
may interact. 

This implies that these kinds of graphs permit to model dynamic graphs in which edges may 
appear and disappear with time. 

Evolving graph. Ferreira [80] introduces the notion of evolving graphs which permits to rep¬ 
resent dynamic graphs thanks to a sequence of static graphs. More precisely, an evolving graph 
Q is represented thanks to a couple ( G , Sg), where G = ( V , E ) is a static graph with V the set of 
its nodes and E the set of its edges, and Sq is a sequence of subgraphs of G. At each instant time 
i, the dynamic graph Q is described by the static graph Gi = (Vi, Ej) £ So- 

Note that this representation of dynamic graphs is richer than the one of temporal networks 
since it permits to model dynamic graphs where nodes and edges may appear and disappear with 
time. 

Evolving graphs are a very intuitive and easy manner to represent dynamic graphs. In this 
thesis, we choose to consider evolving graphs to represent dynamic graphs. 

Stream graph. Recently, Latapy et al. [120] present another model to represent dynamic 
graphs called stream graphs. A stream graph Q is defined by a quadruplet (T, V, W, E) where: 

• T is either a discrete interval of time included in N (for a discrete time system), or a con¬ 
tinuous interval of time included in M + (for a continuous time system). 

• V is a set of nodes. 

• IT is a set of temporal nodes. A temporal node w = (t,u) € W (with r C T and u £ V) 
indicates that the node u is present in the graph at each instant time t £ r. 

• E is a set of temporal links. A temporal link e = (r, (u, v)) £ E (with t C T, u £ V, v £ V, 
and u 7^ v) represents an edge between two distinct nodes u and v present in the graph at 
each instant time t £ r. Note that necessarily (r, u) £ W and (r, v) £ W (i.e., the two 
extremities of the edge must be present in the graph at least at each instant time t £ r); 
otherwise the edge cannot exist. 

Latapy et al. have redefined in their model well-known notions of static graphs. All the 
definitions they give for stream graphs permit to find back these well-known definitions defined for 
static graphs in case where the stream graph considered is static. For instance, they have defined 
the degree of a node u in a stream graph as: d(u) = ]F, ug y |L)«;|/|T|, with \T UV \ the duration 
during which the edge between u and v is present in the stream graph. In the case where the 
stream graph is a static graph, we obtain effectively the notion of degree defined for static graphs. 
Indeed, all the edges of a static graph are always present, hence, the adjacent edges of a node u are 
present during \T\. Therefore, for a static stream graph, we have d(u) = YlveV |T,«,|/|T| = n(u), 
where n(u) corresponds to the number of adjacent nodes of it. 

Edge-scheduled network. Until now, the models of dynamic graphs presented do not permit 
to represent the latency, i.e., the time taken (by a message, a robot, etc.) to go from one node to 
another one. 

Berman [18] introduces edge-scheduled networks as a multigraph defined by a couple (V, E) 
where V is a set of nodes and E is a set of arcs. For each arc of an edge-scheduled network, two 
real weights are assigned: one for the starting time and one for the ending time. For instance, if 
there is an arc between two nodes u and v such that the starting time is equal to 4 and the ending 
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time is equal to 7, this means that a communication may start at time 4 between u and v, and if 
such a communication occurs it will take 3 units of time to reach the node v. 

Therefore, this model permits to represent dynamic graphs where arcs may appear and dis¬ 
appear with time, and where the latencies to cross the arcs may also evolve with time. 

Time-varying graph. Casteigts et al. [40] model dynamic graphs thanks to time-varying 
graphs (TVG for short). 

A TVG Q is described by a quintuplet (V, E , r, p, £) where: 

• V is a set of nodes. 

• E C k X 7 is a set labeled edges. The label of an edge could describe any property. It is 
possible to have multiple edges between a same pair of nodes as long as the labels of these 
edges are distinct. 

• r corresponds to the lifetime of the system: r C T, where T is the temporal domain of the 
system. Hence, T is either N for a discrete time system or for a continuous time system. 

• p is a presence function which indicates whether a given edge is available at a given time. 
More precisely, given an edge e of E and a time t of r this function returns true if the edge 
e is present at time t in the dynamic graph, false otherwise. 

• Q is a latency function which gives the time taken to cross a given edge at a given time. 
More precisely, given an edge e of E and a time t of r, this function returns a time in T 
representing the time to cross e at time t. 

Note that, we can also say that the TVG Q is described by (G, r, p,(), with G = (V,E). In 
this case, we say that Q is based on G. 

The TVG model can be extended by adding a node presence function kxr-> {true, false} 
that indicates whether a given node is present in the system at a given time, and by adding a 
node latency function <f> :V X r —> T that indicates the local processing time at a given time. 

This model, that is similar to the one introduced by Harary and Gupta [101], is very complete. 
It is richer than all the models of dynamic graphs presented previously. Indeed, it integrates the 
time to traverse the edges and permits to represent dynamic graphs where edges, nodes and la¬ 
tencies (of nodes and edges) may evolve with time. 


Graphical representation. There exist graphical representations for each of the models de¬ 
scribed previously. Note that, compared to static graphs which are simple to represent, it is hard 
to represent in a simple way an object that varies with time. Refer to Figure 2.1 for a compar¬ 
ison of the graphical representations of the models of dynamic graphs presented in this section. 
To compare them, we draw the same dynamic graph in each of the graphical representations of 
the models described. To be able to draw the same dynamic graph, we have to consider a dis¬ 
crete time system, otherwise we could not be able to consider the evolving graph model or in the 
edge-scheduled network model. 

2.1.2 Classification of Casteigts et al. [40, 38] 

In addition to the introduction of the TVG formalism, Casteigts et al. [40] have introduced 
some notions to extend the classical definitions of graph theory. For instance, they have intro¬ 
duced the notion of journey that extends the notion of path. In a static graph, a path is a sequence 
of edges permitting to link two nodes. In a dynamic graph, a journey is a temporal path: it corre¬ 
sponds to a sequence of edges present at increasing time permitting to link two nodes. For more 
details, see the formal definition of a journey in Section 2.2 and refer to Figure 2.4. 


11 



Part I, Chapter 2 - Dynamic Graphs 


Evolving graph: 


Stream graph: 



0 1 2 t 



Time-Varying graph: 


Temporal network: 



p( e i> l)=P( e i> 2 )=1 
p(e 2 , 0)=1 
P(e 3 , 2)=1 
p(e 4 , 1)=1 


A(e 1 )={l, 2} 

A(e 2 )={0} 

A(e3)={2} 

A(e 4 )={l} 


p( e i, 0)=0 

P(e 2 , l)=p(e 2 , 2)=0 
p( e 3 > 0)=p(e 3 , 1)=0 
p(e 4 , 0)=p(e 4 , 2)=0 


Edge-scheduled 

network: 



Figure 2.1: Representation of the same dynamic graph in different models of dynamic graphs. 
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This notion of journey is central since it permits to define the notion of temporal connectivity 
in dynamic graphs which indicates whether or not the nodes are reachable by the other nodes of 
the dynamic graph through a journey, and the frequency of this reachability. In other words, like 
the paths in static graphs that permit to indicate whether a static graph is connected or not, the 
journeys in dynamic graphs permit to indicate whether a dynamic graph is connected over time or 
not. Thanks to this notion of journey, Casteigts et al. has classified the different dynamic graphs 
studied in the state of the art according to their temporal connectivity assumptions. In fact, all 
the dynamic graphs that satisfy the same temporal connectivity assumptions are regrouped into 
a same class of dynamic graphs. Casteigts [38] has increased the number of these classes. We 
present here briefly each of these classes. In the technical parts of this thesis, we only consider a 
subset of these classes (we will detail them more formally in Section 2.2). 

In function of the class of dynamic graphs studied, the problems that may be addressed differ. 
Indeed, in some dynamic graphs, some problems become impossible to solve. That is why it is 
important to define multiple classes of dynamic graphs: it permits to find the most dynamic class 
of dynamic graphs in which a problem may be solved. 

Among the classes of dynamic graphs, we can distinguish two groups: one regroups the classes 
of dynamic graphs having a finite temporal connectivity, a second regroups the classes of dynamic 
graphs having a recurrent temporal connectivity. It is trivially impossible to solve a recurrent 
task in a dynamic graph having a finite temporal connectivity. When the temporal connectivity 
is recurrent, it is not necessary to have the knowledge of the dynamics of the graphs to start 
the tasks at the appropriate moment to solve them. Indeed, when the temporal connectivity 
of a dynamic graph is recurrent, the tasks may start at any time, which is not the case when 
considering a dynamic graph having a finite temporal connectivity in which the tasks should 
start at the appropriate timing to succeed to be solved. 

Classes of dynamic graphs with finite temporal connectivity. We give below the list of 
the classes of dynamic graphs possessing a finite temporal connectivity. 

In the graphs of the class described below, it is possible to perform data aggregations where 
all the sensors (modeled by the nodes of the graphs) have to send their data to only one sensor. 

Temporal sink class: A dynamic graph belongs to the temporal sink class if and only if at least 
one node can be reached by all the others through a journey. 

In each of the graphs of the two classes presented below, it is possible to execute a broadcast 
from one node u. In the graphs of the first class presented, u reaches each of its destinations in 
one hop, while in the graphs of the second class the number of hops needed by u to reach each of 
its destinations may be greater than one. 

Temporal star class: A dynamic graph belongs to the temporal star class if and only if at least 
one node will share an edge at least once with every other node (possibly at different times). 

Temporal source class: A dynamic graph belongs to the temporal source class if and only if 
at least one node can reach all the others through a journey. 

Similarly, in the graphs of the two classes below, it is possible to execute a broadcast from 
any of the nodes of the graph. In the graphs of the first class presented, a node reaches each of its 
destinations in one hop, while in the graphs of the second class the number of hops for a node to 
reach each of its destinations may be greater than one. 

Temporal clique class: A dynamic graph belongs to the temporal clique class if and only if 
every pair of nodes will share an edge at least once (possibly at different times). 

Temporal connectivity class: A dynamic graph belongs to the temporal connectivity class if 
and only if every node can reach all the others through a journey. 
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The last class of this group is a generalization of the temporal connectivity class. Indeed, in 
the graphs of this class, it is possible to execute a broadcast with feedback from each node. 

Round-trip temporal connectivity class: A dynamic graph belongs to the round-trip tem¬ 
poral connectivity class if and only if every node can reach every other node and be reached 
from that node afterwards. 

Classes of dynamic graphs with recurrent temporal connectivity. We give below the 
list of the classes of dynamic graphs possessing recurrent temporal connectivity. 

In each of the dynamic graphs Q (based on G) of the six classes presented below, all the 
edges of G are infinitely often present in Q. In the graphs of the first class, all the nodes can 
communicate with each other in only one hop, and this at each instant time. In the graphs of 
the second class, all the nodes can communicate with each other infinitely often in only one hop. 
In the graphs of the other classes, even if any node can communicate infinitely often with any 
other one, the number of necessary hops may be greater than one. However, in the graphs of the 
second, third, and fourth class, the latency of any journey is bounded (which is not the case in 
the graphs of the last class). 

Complete static class: A dynamic graph Q based on G belongs to the complete static class if 
and only if G is a complete graph, and every edge of G is present in Q at each instant time. 

Complete graph of interaction class: A dynamic graph Q based on G belongs to the com¬ 
plete graph of interaction class if and only if G is a complete graph, and every edge of G is 
present infinitely often in Q. 

Static class: A dynamic graph Q based on G belongs to the static class if and only if each edge 
of G is present in Q at each instant time. 

Bounded-recurrent-edges class: A dynamic graph Q based on G belongs to the bounded- 
recurrent-edges class if and only if there exists 5 £ T (where T is either a discrete interval of 
time included in N (for a discrete time system), or a continuous interval of time included in 
R + (for a continuous time system)) such that every edge of G is present in Q at least once 
in any time interval of length 5. 

Periodic-edges class: A dynamic graph Q based on G belongs to the periodic-edges class if and 
only if every edge of G is present in Q periodically. 

Recurrent-edges class: A dynamic graph Q based on G belongs to the recurrent-edges class if 
and only if every edge of G is present in Q infinitely often. 

In all the dynamic graphs Q (based on G ) of the classes presented afterwards, it may exist 
eventual missing edge(s): an eventual missing edge is an edge of G such that there exists a 
time from which this edge is never present in Q. The presence of eventual missing edges makes 
problems harder to be solved. Indeed, without knowledge of the dynamics of a graph, it is not 
possible to distinguish an eventual missing edge from a missing edge that will appear later in the 
future. Hence, it is not possible to know if a process has to wait for a missing edge to appear 
again. Indeed, if a process decides to wait for a missing edge, it may wait indefinitely in the case 
where this missing edge is in fact an eventual missing edge. 

The connected-over-time class is the class with the weakest temporal connectivity assump¬ 
tions (among the classes of the classification of Casteigts et al.) such that the graphs of this 
class have a recurrent temporal connectivity. Hence, the graphs of this class are the one with the 
weakest temporal connectivity assumptions in which it is possible to solve recurrent tasks. 

Connected-over-time class: A dynamic graph belongs to the connected-over-time class if and 
only if there exists infinitely often a journey between any pair of its nodes. 
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Figure 2.2: Inclusion of the classes of dynamic graphs. 


In graphs of the connected-over-time class, there is no assumption on the time of appearance 
of the journeys. To permit to bound the time of the solutions to problems, we can consider graphs 
of the bounded-temporal-diameter class in which there is a bound on the time of appearance of 
the journeys. 

Bounded-temporal-diameter class: A dynamic graph belongs to the bounded-temporal-dia¬ 
meter class if and only if there exists <5 E T (where T is either a discrete interval of time 
included in N (for a discrete time system), or a continuous interval of time included in M + 
(for a continuous time system)) such that, for any pair of its nodes, there exists at least one 
journey every 5 units of time. 

Having a journey every 5 units of time between two nodes does not permit to bound the time 
to reach each node of the journey. To do so, we can focus on the graphs of the following class. 

Steady progress class: A dynamic graph belongs to the steady progress class if and only if at 
each instant time there is a journey between any pair of its nodes such that each edge of 
this journey appears in bounded time. 

Finally, the graphs of the four last classes that we present are based on the static version of the 
journey notion (i.e., they are based on the path notion). We present the graphs of these classes 
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from the ones with the weakest assumptions on the paths to the ones that contain the strongest 
assumptions on the presence of the paths. 

Recurrent-paths class: A dynamic graph belongs to the recurrent-paths class if and only if 
there exists infinitely often a path between any pair of its nodes. 

Recurrently-connected snapshots class: A dynamic graph belongs to the recurrently-con¬ 
nected snapshots class if and only if there exists infinitely often a time at which it is con¬ 
nected. 

Always-connected class: A dynamic graph belongs to the always-connected class if and only 
if at each instant time, it is connected. 

T-interval connected class: A dynamic graph belongs to the T-interval connected class if and 
only if it is connected at each instant time and for all time interval I of length T, there 
exists a spanning connected subgraph of G whose edges are present at any time of I. 

Inclusion. Due to their definitions, there exists multiple inclusion relations between all the 
classes presented (refer to Figure 2.2). Note that the relation of inclusion between any pair of 
classes is a strict inclusion. This hierarchy of class has deep consequences on calculability, refer 
to Section 4.1 for more details. 

2.2 Model 

We define formally here all the notions and assumptions related to dynamic graphs used 
afterwards. 

Main notions (evolving graph, characteristic graphs, and edges). In the following, we 
give the definitions of evolving graph, and of the characteristic graphs and edges we have to deal 
with when considering dynamic graphs. 

We consider the time as discretized and mapped to N. We study dynamic graphs such that 
the set of nodes is static, only the edges may appear and disappear with time. The most suitable 
formalism is then the one of evolving graph introduced by Ferreira [80]. More formally, we can 
define an evolving graph as follows. 

Definition 2.1 (Evolving graph). An evolving graph Q is an ordered sequence (Go, Gu, G 2 , ■ ■ •) 
of subgraphs of a given static graph G = (V. E) with V a set of nodes and E a set of edges. Q is 
said to be based on G, and G is called the footprint of Q. 

For any i > 0, we call Gi = (D, Ef) the snapshot of Q at time i. We say that the edges of 
Ei C E are present in Q at time i. As said, V is a static set and we denote \V\ by n. 

The footprint describes the set of edges that are allowed to be present in Q. While the footprint 
gives the allowed connections, the underlying graph, defined formally below and denoted Ug , 
captures the actual connections in Q (that is, the set of edges that are present at least once in the 
lifetime of the graph). Since some edges of G may never be present in Q, these edges are also not 
present in Ug. 

Definition 2.2 (Underlying graph of an evolving graph Q). The underlying graph of an evolving 
graph Q = ((V, Eq), (V, Ei), (V, E 2 ), . ■ ■) is the static graph Ug such that Ug = ( V,Eg ) with 
Eg = UieN Ei ■ 

Even if Ug represents the actual connections in Q , some edges of Ug may stop to be present 
in Q after a certain time. To capture the connections that are actually usable infinitely often we 
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Footprint G 


Possible evolving graph S 
whose footprint is G 
and such that Vi>3, Gi=G 2 


Underlying graph of S 
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Eventual underlying graph of S 



Figure 2.3: Evolving graph and characteristic graphs. 


consider the eventual underlying graph. To define formally what the eventual underlying graph 
is, we need to define some characteristic edges. 

An eventual missing edge is an edge of E such that there exists a time after which this edge is 
never present in Q. These kinds of edges cannot be crossed after a certain time, they thus are not 
present in the eventual underlying graph. By opposition, a recurrent edge is an edge of E that is 
not eventually missing. 

The eventual underlying graph, denoted Ug , is then defined as follows. 

Definition 2.3 (Eventual underlying graph of an evolving graph Q). The eventual underlying 
graph of an evolving graph Q = ((V, Eq), (V, E{), (V, E2), ■ ■ .) is the static graph Ug such that 
U% = (V, Eg) where Eg = a. MUp, Ej). 

An example illustrating the notions presented in this paragraph can be found in Figure 2.3. 

Classes of dynamic graphs. In Section 2.1.2, we presented multiple classes of dynamic 
graphs. We define formally in this paragraph the classes of dynamic graphs we focus on in this 
thesis (see [40]). By abuse of language, in the remainder of this thesis, we call an a X graph” a 
graph that belongs to the class X. 

The class ST (static), defined formally below, is the class with the weakest dynamics we 
consider in this thesis in the sense that the connectivity assumptions of the graphs of this class 
are the strongest possible. 

Definition 2.4 (Static graph (ST graph)). An evolving graph Q = (Go, G\, G 2 , ■ ■ ■) is a ST 
graph if and only if for any i E N, Gi is equal to the footprint G. 

In this thesis, we also consider the class B1ZS (bounded-recurrent-edges) [39], which is defined 
below. 
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Figure 2.4: Example of a journey starting at node u and ending at node v. 


Definition 2.5 (Bounded-recurrent-edges graph ( B1Z£ graph)). An evolving graph Q is a B7Z£ 
graph if and only if there exists a 5 £ N such that each edge of the footprint G is present in Q at 
least once in any time interval of length 5. 

Now, we present the class 1Z£ (recurrent-edges) [106, 39]. 

Definition 2.6 (Recurrent-edges graph (1Z£ graph)). An evolving graph Q is a 1Z£ graph if and 
only if each edge of the footprint G is a recurrent edge in Q. 

To sum up, in the graphs of the three classes presented above, there does not exist eventual 
missing edge. All the edges of a ST, B1Z£ or 1Z£ graph are recurrent. In other words, if an 
evolving graph Q is a ST, B1Z£ or 1Z£ graph then its eventual underlying graph Ug is equal to 
its footprint G. 

We now present the two last classes we consider in this thesis. In the graphs of these two 
classes, it is possible to have eventual missing edges. 

First we consider the class AC (always-connected) [127, 116]. 

Definition 2.7 (Always-connected graph (AC graph)). An evolving graph Q = (Go, G\, G^, ■ ■ •) 
is a AC graph if and only if for any i £ N, Gj is connected. 

Below, we define the class with the strongest dynamics we consider in this thesis. In the 
graphs of this class, the edges may appear and disappear unpredictably without any recurrence, 
periodicity, or stability assumption. The only assumption made in the graphs of this class is that 
each node is infinitely often reachable from another one through a journey. 

To define formally the class COT, we first need to define formally a journey. 

Definition 2.8 (Journey). A journey J in an evolving graph Q is a sequence of couples ((ei, t\), 
(e 2 ,t 2 ), ■ ■ ■, (efc, tk)) such that (e\,e 2 , ■ ■ ■, eif) is a path in G, for any i such that 0 < i < k, > 
ti, and for any j such that j < k, the edge ej belongs to Et .. The time t\ is denoted departure(J) 
and corresponds to the time at which the journey starts. 

Figure 2.4 pictured an example of a journey starting at node u and ending at node v. 

We can now formally define the class COT. 

Definition 2.9 (Connected-over-time graph (COT graph)). An evolving graph Q = ((V,E$), 
(V, E\), ( V, E 2 ),. •.) is in COT if and only if for any pair of nodes (u, v) G V 2 and for any time 
t G N there exists a journey J starting at node u and ending at node v such that departure(J) > 
t. 
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Figure 2.5: Inclusion of the classes of dynamic graphs. 


In other words, a COT graph is a dynamic graph in which there exists infinitely often a 
journey between any pair of nodes. This implies that the class COT is the set of all evolving 
graphs such that their eventual underlying graph is connected [78]. 

As indicated in Section 2 . 1 . 2 , there exists an inclusion relation between all the classes pre¬ 
sented: ST C BTZS C 1Z£ C COT and ST C AC C COT (refer to Figure 2.5). 

Thesis assumptions. In this thesis, we restrict ourselves to evolving graphs whose footprints 
are anonymous (i.e., the nodes cannot be distinguished), undirected (i.e., the edges are bidirec¬ 
tional), and simple graphs. We mostly consider graphs whose footprints are rings, except in 
Section 11.1 where we consider more general graphs. Although the rings we considered are undi¬ 
rected, to simplify the presentation and discussion, we, as external observers, distinguish between 
the clockwise and the counter-clockwise (global) direction in the ring. 

Operations on evolving graphs. For the sake of some proofs in this thesis, we need to intro¬ 
duce two operators on evolving graphs. 

The first one, denoted \, removes some edges of an evolving graph for some time ranges. More 
formally, from an evolving graph Q = ((V, Eq), (V, E\), (V, E 2 ), ...), we define the evolving graph 
Q\{(Ei, ri),..., (Afc, Tfc)} (with for any i G {1,..., k}, Ei C E and r* C N) as the evolving graph 
{(V, E'q), ( V , E[), (1/, E ' 2 ),...} such that: Vi G N, Ve G E, e G E[ ^ e G E t A (Vi G {1,..., k}, e £ 

Ei\/1 <£ Ti). 

An example illustrating this operation is presented in Figure 2.6. 

The second operator, denoted (g>, concatenates a prefix of an evolving graph with a suffix 
of another one. The two evolving graphs concatenated are defined on the same set of nodes. 
Formally, given two evolving graphs, Q = (Go, G\, G 2 , ■ ■ .), with for any i G R, G; = ( V, Ei ), 
and H = (Ho, H\, H- 2 , ...), with for any i 6 N, Hi = (V, E() and an integer t, the evolving graph 
Q Tt H is the evolving graph Q' = (G' 0 , G' l7 G' 2 ,...), with for any i G N, G\ = (V, ET), defined by: 
e G ET if and only if i < t A e G Ei or i > t A e G E[. 

An example illustrating this operation is presented in Figure 2.7. 

Other definitions/properties. Except if explicitly written otherwise, we define the distance 
between two nodes u and v of Q by the length of a shortest path between u and v in its footprint 
G. 

We say that two evolving graphs Q and Q' share the same prefix if there exists a time t such 
that for any i < t, G, = G\. 

We say that a node u satisfies the property OneEdge(u, t , t') if and only if an adjacent edge of 
u is continuously missing from time t to time t' while the other adjacent edge of u is continuously 
present from time t to time t'. 
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Figure 2.6: Illustration of the \ operator. 


Legend : 

- Present edge 

. Missing edge 


Evolving graph 
S\ such that 
Vi>4, Gj=G 4 



0 1 2 3 4 t 


Evolving graph 
S 2 such that 
Vi>4, G i= G 4 



0 1 2 3 4 t 


Evolving graph 
Si S2 such that 

Vi>4, G i= G 4 

- 1 - 1 - 1 - 1 - 1 -► 

0 1 2 3 4 t 







Figure 2.7: Illustration of the <g) operator. 
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In this thesis, we are interested in the study of distributed systems which are systems com¬ 
posed of multiple entities. The entities of a distributed system collaborate to solve a same task. 
They are autonomous: they take their own decisions without the help of a central entity. These 
decisions are taken based on their own vision of the system. More specifically, a decision is taken 
thanks to the execution of an algorithm (i.e., sequence of ordered instructions). The set of all the 
algorithms of all the entities of a distributed system is a distributed algorithm. This is thanks to 
the execution of a distributed algorithm that the entities of a distributed system collaborate to 
solve tasks. 

It is hard to solve problems using distributed systems. Indeed, in a distributed system all the 
entities have only a local vision of the system whereas the entity of a central system has a global 
vision of the system. Moreover, in a distributed system the entities have to collaborate to solve a 
task, which is not the case in a central system in which only a single entity is present. However, 
using distributed systems have some advantages: if one or multiple entities fail, it may be still 
possible to solve the studied task, whereas if the entity of a central system fails, it is not possible 
to solve the task anymore. Moreover, using multiple entities may permit to solve some tasks more 
efficiently than solving them with only a single entity: the entities of a distributed system may 
distribute the task to solve between themselves. 

In this context, we are more precisely interested in the study of swarms of robots. A swarm 
of robots is a distributed system whose autonomous entities are robots. Each robot is able to 
take decisions without the control of a central authority. Each robot is endowed with motion 
actuators, i.e., it is able to move in the environment in which it evolves. Robots are also endowed 
with sensing captors permitting them to sense their environment. Robots are a theoretical model 
in the sense that they represent assumptions that are made on the processes of a distributed 
system (such that these processes have the ability to move in their environment). The goal of the 
study of theoretical distributed systems is to determine the minimum assumptions made on the 
processes of a distributed system to solve a task; and to find distributed algorithms permitting to 
solve this task in a system with such assumptions. 

With the increase of drones, automatic vehicles, etc. (that can be modeled thanks to swarms of 
robots), robots are more and more used. Using robots is interesting, specifically in the case where 
the actions to perform are dangerous for humans (for instance the exploration of a dangerous 
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zone) or the tasks to execute are too hard for humans (for instance the transportation of a heavy 
load). 

The tasks solvable by the robots depend on their capacities (Can they see the whole environ¬ 
ment in which they evolve?, Can they orient themselves in their environment? ...). 

Every system being subject to faults, in order to tolerate faults to which robots may be 
subject, it is better to use multiple robots with few capacities rather than only one robot endowed 
with lots of capacities. Indeed, the use of only one powerful robot is risky since if only one of its 
capacity breaks, the robot may be unable to solve the task it has to perform. Moreover these 
kinds of powerful robots are expensive. Using multiple robots with few capacities that cooperate 
in order to solve a task is, however, convenient since it is less probable that the robots would be 
subject to faults (the less robots have capacities, the less they will be prone to faults). Moreover 
these robots are less expensive. 

Considering swarms of robots with few capacities, some articles, initiated by Suzuki and 
Yamashita [136], analyze the necessary and sufficient conditions on the capacities of the robots 
or on the number of the robots in order to solve some important tasks like the exploration or the 
gathering in a deterministic way. 

In the continuation of these work [136, 137, 92], we study swarms of robots that cooperate 
in order to solve a common task. As indicated, swarms of robots are theoretical distributed 
systems: they model realistic systems but sometimes in a simpler way. Indeed, in these systems it 
is possible to assume that the entities have infinite memory or infinite computation capabilities. 

In this chapter, we first give an overview of the state of the art on swarms of robots (see 
Section 3.1), then we describe the formal model we use all along this thesis (see Section 3.2). 


3.1 State of the Art 

In this section, we present the state of the art about robots. On this purpose, we first describe, 
in Section 3.1.1, the computational model of the robots, then we present, in Section 3.1.2, the 
different environments in which the robots may evolve. We then describe, in Section 3.1.3, the 
main assumptions considered on robots in the literature. Finally, we give, in Section 3.1.4, the 
classical problems solved using robots. 

3.1.1 Computational Model 

In this section, we present the computational model of the robots. This computational model, 
explained below, is based on Look-Compute-Move cycles (denoted L-C-M cycles). It has been 
introduced by Suzuki and Yamashita [136] and is now used in most of the articles dealing with 
swarms of robots. 

When robots execute algorithms, they execute an infinite number of L-C-M cycles. Each cycle 
is composed of a Look, a Compute and a Move phase described as follows. During the Look phase, 
a robot uses its sensing captors in order to observe its environment. Based on these observations, 
during the Compute phase a robot computes (thanks to its algorithm) a destination towards 
which it wants to move. Then, during the Move phase it effectively moves to the destination it 
computed during the Compute phase. 

There exist three variants of this model depending on the synchronization of the phases of the 
L-C-M cycles of the robots. We describe below each of these variants. 

FSYNC: Suzuki and Yamashita [137] introduced the FSYNC (for fully-synchronous) model: in 
the FSYNC model the time is discrete, and at each instant time all the robots of the system 
execute atomically and simultaneously their L-C-M cycle. Note that a unit of time is also 
called a round, therefore in this model each robot execute a L-C-M cycle at each round. 
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SSYNC: Suzuki and Yanrashita [136] introduced the ATOM model, also known as the SYm or 
SSYNC (for semi-synchronous ) model, in which the time is discrete, and, at each instant 
time, a non-empty subset of the robots of the system execute atomically and simultaneously 
their L-C-M cycle. This model is a generalization of the FSYNC model. 

ASYNC: In the CORDA model [92], also known as ASYNC (for asynchronous ) model, the 
robots execute their L-C-M cycles independently. This is done by adding a wait phase at 
the beginning of each L-C-M cycle of the robots during which the robots just stop their 
execution. In the ASYNC model, the Wait, Compute, and Move phases of the robots are of 
arbitrary but finite length and may be different for each cycle and for each robot. Only the 
Look phase is supposed to be instantaneous. Besides, there is an arbitrary but finite time 
between each phase of the same cycle. Therefore, in this model it is possible for a robot 
to see during its Look phase robots while they are moving. This model, introduced by 
Flocchini et al. [92], is the more realistic one compared to the FSYNC and SSYNC models. 
However since the ASYNC model encompasses the two other models (i.e., every execution 
allowed in the FSYNC and the SSYNC models are also allowed in the ASYNC model, but 
the reverse is not true), solving problems in this model is harder than in the FSYNC or the 
SSYNC models. 


3.1.2 Environments 

The first work considering swarms of robots [136, 137] consider that robots evolve in the 
plane: robots are able to move in the whole two-dimensional Euclidean space. Then, in order 
to constrain the possible locations where the robots may be, some work consider discrete static 
environments modeled by graphs [113, 75]. In these graphs, the nodes represent the locations of 
the plane where the robots may be, and the edges represent the paths to go from one location 
to another one. More recently, graphs are used to represent dynamic environments. In these 
environments the nodes and edges may appear and disappear with time. These dynamic graphs 
are useful to represent unstable environments that may change over time, like for instance, a 
transportation network, a building in which doors are closed and open over time, or streets that 
are closed over time due to work in process or traffic jam in a town. 

In this section, we first present the literature dealing with robots in continuous space, then 
we present the state of the art about robots evolving in discrete static environment, and finally, 
we describe the literature about robots evolving in discrete dynamic environment. 


Continuous space. In the literature, robots may evolve in the continuous space. While con¬ 
sidering the continuous space, some articles deal with robots evolving in a line (one-dinrensional 
Euclidean space) [45, 37], some others study robots evolving in the plane (two-dimensional Eu¬ 
clidean space) [72, 36, 43, 50, 56, 4], some focus on robots evolving in the three-dimensional 
Euclidean space [139, 143, 121], More recently an article deals with robots evolving in N dimen¬ 
sional Euclidean space, with JV£N [123]. 

When evolving in the continuous space, robots are endowed with captors with an infinite 
precision: during the Look phase, the robots are able to see the points of the continuous space 
where the other robots of the system are located. Moreover, to move in the continuous space, the 
robots need to have an infinite precision of computation (to designate the point in the continuous 
space they want to reach). Hence, during the Compute phase, robots are able to compute with 
infinite precision. During the Move phase, they move in straight line to the destination point 
they computed during the Compute phase. The movements of the robots are said to be rigid if 
the robots succeed to reach, during their Move phase, the destination point they have computed 
during their previous phase [95, 143, 6]. In some models, the Move phase of a robot is aborted 
before it reaches its destination point [95, 139, 102], More precisely, there exists a value 5 > 0 
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such that if the destination point is at distance less than <5, then the robot reaches its destination 
point; otherwise it moves of 6 units of length towards its destination point. 

Moreover, while considering the continuous space, robots are generally dimensionless, i.e., 
viewed as points in this space [72, 36, 43]. However, there exists some articles where the robots 
are considered to be fat, i.e., robots are viewed as disks [50, 56, 4], 

Discrete static environment. In order to restrict the computational precision of the robots 
and the locations where the robots may be, some articles study robots that evolve in discrete 
static environments, i.e., static graphs. In these graphs, the nodes represent the locations where 
the robots may be located, and the edges represent the possibilities for a robot to move from one 
location to another one. 

Generally, each robot is able to cross at most one edge at each L-C-M cycle. Most of the 
articles consider undirected graphs [113, 85]: in these graphs the edges are bidirectional. However, 
it exists some articles dealing with directed graphs [17, 96] in which edges can be crossed only in 
one direction. Generally, the graphs in which robots evolve are composed of anonymous nodes 
[64, 55], i.e., robots are not able to distinguish the nodes. 

While considering discrete static graphs, multiple topologies are studied: chains [85], rings 
[83, 55, 21], trees [84, 135], grids [63, 81], multidimensional grids [13], tori [64] and arbitrary 
graphs [69, 51]. 

In the literature, many work consider ring-shaped graphs. These graphs are the simplest ones 
with symmetry. Most of the time the difficulty of problems comes from this topology and the idea 
of the solution in ring-shaped graphs can be extended to more general graphs. 

Discrete dynamic environment. More recently, robots are considered to evolve in discrete 
dynamic environments, i.e., dynamic graphs. As indicated in Section 2.1, dynamic graphs permit 
to model unstable systems such as wireless networks, environments in which a natural disaster 
has occurred, etc. In the literature, the dynamic graphs in which robots evolve are graphs such 
that the set of nodes is fixed, but the edges may appear and disappear with time. 

Similarly as in static graphs, the nodes of the graphs represent the locations where the robots 
may be located and the presence of an edge at a given time represents the possibility for a robot 
to move from one location to another one at this time. 

In all the articles of the state of the art dealing with robots evolving in dynamic graphs, each 
robot crosses at most one edge at each L-C-M cycle. Some articles study undirected dynamic 
graphs where the edges are bidirectional [142, 3], while some others focus on directed dynamic 
graphs where the edges are directed (i.e., edges can be crossed only in one direction) [105, 90]. 
Some articles deal with anonymous nodes [142, 3], while some others consider non-anonymous 
nodes. Among the last category of articles, some consider that nodes of the graphs have distinct 
identifiers [105, 90], some others just consider that some nodes are identically marked [122], while 
some others assume that there is one marked node (i.e., node that is distinguishable from the 
other nodes) [125]. 

Most of the articles dealing with robots in dynamic graphs consider ring-shaped graphs [110, 
142, 106, 125, 122, 3, 128], however, some study arbitrary graphs [105, 90], while some others 
focus on specific graphs like cactus (i.e., tree of cycles) graphs [104] or torus graphs [99]. 

Multiple kinds of dynamics are considered. Indeed, some articles consider AC graphs (graphs 
connected at each instant time) [106, 104, 125, 122, 99]. Some articles study graphs in which all 
the edges appear infinitely often, with [106] or without [110] a bound on their time of appearance, 
while some others consider dynamic graphs where the edges appear periodically [105, 90]. There 
is a work that focuses on dynamic graphs in which the edges appear in a random way [142]. 
Some authors focus on the most dynamic graphs (of the classification of Casteigts et al. [40, 38]) 
possessing a recurrent temporal connectivity, i.e., they focus on COT graphs [128]. Finally, some 
authors introduce another kind of dynamics, called vertex permutation, such that the topology of 
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the graph at each instant time is maintained but the edges between the (fixed set of) nodes may 
change [3]. For instance, at each instant time, the topology is a ring, but at a time t the node u 
may be adjacent to a node v and a node w and the next instant time the node u may be adjacent 
to two different nodes. Agarwalla et al. [3] also study AC graphs with vertex permutation. For 
the case of the ring, this implies that at each instant time the topology of the graph is either a 
ring or a chain, and at each instant time the connections between the nodes may change. 

Refer to Section 5.2 and Section 8.2 for more details about existing work studying robots in 
dynamic graphs. 

3.1.3 Robot Capacities 

The robots may be endowed with multiple capacities that represent the assumptions made on 
the processes of a distributed system. The capacities capture the abilities delivered by the captors 
possessed by the robots. They indicate whether the robots have memory or not, whether they are 
endowed with compasses or not, etc. If the robots are endowed with many capacities, then they are 
more subject to faults since each capacity involves a mechanism that may be broken. Therefore, 
the goal when studying robots is to use robots with the fewer capacities possible. However, it 
is not always possible to solve problems with robots devoid of capacity. Hence, generally, the 
articles of the state of the art focus on the feasibility of problems depending on the capacities of 
the robots by proving the necessity and/or the sufficiency of each of them. In this section, we 
detailed the most widespread capacities of the robots. 

Uniformity: The robots may all execute the same algorithm, in this case they are said to be 
uniform [21, 125, 81]. However, it is also possible for the robots not to possess the same 
algorithm. 

Identification: It is possible to consider anonymous robots [21, 81, 122], in this case they are 
indistinguishable from each other. It is also possible to consider robots with identifiers 
[115, 62, 3]. Generally, the robots possess distinct identifiers, and each robot knows, at 
least initially, only its own identifier. Having distinct identifiers permit, for instance, to 
elect a leader (i.e., a robot that is distinguished by all the robots of the system) that will 
lead the coordination of the robots [36]. Some authors consider also that robots may be 
endowed with identifiers that are not necessarily distinct [32]: when two robots share the 
same identifier they are said to be homonyms. 

Visibility range: Robots are endowed with visibility sensors that permit them to sense their 
environment. More precisely they are able to see the other robots of the system. In some 
articles, the robots are able to see all the robots of the environment (either continuous space 
[36, 72] or discrete environment [63, 85]), in this case the robots have unlimited visibility; 
otherwise they have limited visibility. When the robots have limited visibility, they are 
called myopic robots. Myopic robots in the plane only see robots located in their radius of 
visibility [93, 134]. A myopic robot in a graph that sees at distance x means that it sees 
all the robots of the environment that are located to at most x hops away from its current 
position [55, 100]. When myopic robots see only their own node, we say that the robots 
have local vision, by opposition to robots with global vision that have unlimited visibility. 
In the plane, there also exist some articles where the view of robots may be obstructed, 
either by other robots located in their sight [50, 48] or by obstacles on the plane [124], 

Multiplicity detection: There exists two kinds of multiplicity detections: when a robot is en¬ 
dowed with the weak multiplicity detection and moves in a continuous space [92] (resp. a 
discrete environment [85]) it is able to see if there is none, one or multiple robots on each 
point (resp. on each node) of its visibility range, but it is not able to know the exact number 
of robots located on each point (resp. on each node); when a robot is endowed with strong 
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multiplicity detection and moves in a continuous space [71] (resp. a discrete environment 
[63]) it is able to see the exact number of robots that are located on each point (resp. on 
each node) of its visibility range. 

Memory: Robots may be oblivious, i.e., do not have persistent memory [113, 83, 55]. More 
precisely, oblivious robots have their variables that are reset at the end of each L-C-M 
cycle. However, during a L-C-M cycle an oblivious robot may use an infinite amount of 
memory to compute. Conversely, robots may possess persistent memory to store variables 
[51, 69, 125]. The values of these variables subsist during the different L-C-M cycles: they 
are not reset at the end of each L-C-M cycle. 

Orientation and length units: When moving in the plane, robots may possess a compass that 
indicates them the cardinal directions. Robots that possess compasses agree then on the 
direction and orientation of the two axes [47, 67]. There also exist partial compasses that 
permit robots to agree on the direction and orientation of only one axis [19]. Two robots 
have the same chirality [143] if it is possible to obtain the direction and orientation of the 
two axes of one of them thanks to a rotation of the direction and orientation of the two axes 
of the other one. Refer to Figure 3.1 for an illustration on the orientation capacity of robots 
moving in the plane. Independently of this orientation capacity, the robots may have their 
own unit of length [43, 94], or they can share the same unit of length [47, 67]. When moving 
on graphs, the term chirality is also used: if the robots have the same chirality [12, 47] this 
implies that they agree on the labeling of the ports of the nodes of the graph, otherwise they 
have not the same chirality [21, 65]. Refer to Figure 3.2 for an illustration of the chirality 
in graphs. 

Communication: When robots communicate only in an implicit way by observing the positions 
of the other robots of the system, they are said to be silent [42, 21, 63]. Robots may also 
communicate in an implicit way by encoding information thanks to their movements and 
by observing these movements, such robots are called stigmergic robots [66]. It is also 
possible for the robots to be able to communicate explicitly. Indeed, robots may exchange 
values of their variables when located on a same point of the continuous space or on a 
same node of the graph [54, 53, 26]. They are also able to communicate explicitly with 
all the robots of the system in models where they are endowed with lights [130, 52, 102, 
6 ]: lights encode information and are visible by all the robots of the system, they hence 
permit an explicit communication between the robots. Note that, the lights also represent 
a part of the persistent memory of the robots. Similarly, while evolving in discrete (either 
static or dynamic) environment, it may exist whiteboards on nodes that can be read and 
written by the robots located on them [110, 88, 128]: these whiteboards permit the robots 
to communicate in an explicit way, and constitute memories located on nodes. 

3.1.4 Classical Problems 

There exist multiple problems that may be solved thanks to robots. Robots may solve very 
complex tasks like rescuing a person in danger. All these complex tasks can be decomposed in 
multiple basic tasks. From an algorithmic point of view, we focus only on these elementary tasks. 
We present in this section the classical elementary tasks solved thanks to robots depending on 
the environment in which they evolve. 

Continuous space. The gathering problem is a fundamental task in which robots, initially 
scattered in the environment, have to be located on one point, not known in advance, of the 
continuous space in finite time [43, 93, 50]. When only two robots have to gather, the gather¬ 
ing problem is called the rendezvous problem [109, 95]. Since the robots agree on a point of the 
continuous space, and meet themselves on this point, the gathering problem is related to the 
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Figure 3.1: Illustration of the orientation capacity of robots evolving in the plane. 


consensus problem in classical distributed systems [57, 107]. The gathering problem is a basic 
problem of the literature. Indeed, once the gathering problem is solved, the gathered robots may 
exchange information or divide some tasks between them. Note that some solutions only succeed 
to converge through the gathering: the set of robots, with arbitrary initial positions, asymptoti¬ 
cally approach the exact same, but unknown beforehand, position [7, 111]. Such solutions cannot 
be composed with other algorithms to solve more complex tasks since they only converge through 
the gathering and hence never terminate. 

The approach problem has some familiarity with the rendezvous problem: to solve the ap¬ 
proach problem, in finite time, the robots (that possess a limited visibility range) have to be in 
the range of vision of each other [51, 67]. 

At the opposite of the gathering problem, there is the scattering problem: to solve this prob¬ 
lem, the robots, initially gathered, have to be located, in finite time, at distinct points of the 
continuous space [70, 108]. Lots of articles in the literature require the robots to be initially at 
distinct positions; therefore the scattering problem is an important problem. 

Some articles deal with the pattern formation problem: starting from arbitrary initial posi¬ 
tions, the robots must, in finite time, arrange themselves in the continuous space to form the 
pattern given in input [72, 56, 91]. Note that the robots are allowed to form a pattern that 
corresponds to a homothety and/or to a rotation of the pattern given in input. Sometimes the 
gathering is viewed as a pattern formation problem since the robots have to form a point as 
pattern. The pattern formation problem is an important problem since the robots are able to 
position themselves in the plane relatively to each other; therefore, they are able to attribute 
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Figure 3.2: Illustration of the chirality in graphs. 


themselves some roles to follow for a future task. Like for the gathering problem, some solutions 
to the pattern formation problem only converge toward the pattern given in input. For instance, 
some solutions converge through a uniform circle: the robots converge to a position such that all 
the robots are located evenly on the circumference of a circle [58, 59]. Such solutions cannot be 
composed with other algorithms to solve more complex tasks since they only converge through 
the pattern given in input and hence never terminate. 

In the literature, there exist some articles dealing with the leader election problem in the 
plane: given a set of robots at arbitrary positions on the plane, all the robots agree, in finite 
time, on a specific robot which is the leader [36, 72], Thanks to the result of Flocchini et al. 
[94], Dieudonne et al. [72] prove that the leader election problem is equivalent to the pattern 
formation problem for four and more asynchronous, oblivious, anonymous robots with the same 
chirality. This means that, in this setting, the pattern formation problem is solvable if and only 
if the leader election problem is solvable. 

There also exist perpetual (i.e., that never terminate) tasks studied in the state of the art. 
Contrary to the algorithms that converge through a solution, the algorithms solving a perpetual 
problem never terminate because of the nature of the problem (that is perpetual). This is the 
case of the flocking problem in which robots have to move in the continuous space while forming 
a given pattern [35, 141, 36]. 

Discrete static environment. The gathering and rendezvous problems are also studied while 
considering discrete static environment. The goal of these problems in continuous space and in 
discrete static environment is quite similar. Indeed, in discrete static environment the gathering 
[135, 81] and the rendezvous [51, 69] problems are defined as follows. Robots, initially scattered, 
have to be, in finite time, located on a same node of the graph. When the robots are asynchronous, 
then the robots are also allowed to gather on edges. Similarly as for the continuous space the 
rendezvous problem corresponds to the gathering of two robots. Note that the approach problem 
(in the continuous space) can be reduced to the rendezvous problem in an infinite grid [51, 67]. 

In discrete static environment, the scattering problem ( a.k.a. dispersion ) is also studied [14, 
133, 10] and defined hereafter. From an arbitrary initial configuration, in finite time, at most one 
robot must be located in each node of the graph. 

The leader election problem is also studied while considering discrete static environment [15, 
61] with a similar goal as in continuous space (only one robot must end up leader, and all the 
other robots of the system must know which robot is the leader). 

While considering the discrete static environment, a fundamental problem is the exploration 
problem. Indeed, since the seminal work of Shannon [132], exploration of graphs by a cohort of 
robots has been extensively studied. There exist mainly three variants of the problem described 
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below. For each of these variants, the robots have to explore the graph, i.e., each node of the 
graph must be visited at least once by a robot. In the exploration with stop variant the robots 
have to explore, in finite time, the graph, and then they are required, also in finite time, to stop 
their execution once they detect that the graph has been explored [83]. In the exploration with 
return variant, the robots have to explore the graph in finite time and then they are required, 
also in finite time, to come back to their initial location once they detect that the graph has been 
explored [74]. Finally, in the perpetual exploration variant, each node has to be infinitely often 
visited by some robots [12]. It is also possible to consider the exclusive version of each variant, in 
which no two robots should ever be located at the same node or cross the same edge at the same 
time [21], 

Discrete dynamic environment. While considering dynamic graphs, the gathering [110] 
and the rendezvous [142] problems are also studied (i.e., initially scattered, the robots have to be 
located in finite time on a same node of the graph). 

In AC graphs the gathering problem is impossible [122], Therefore, some articles study the 
near-gathering [122, 128], where robots must end up located on two adjacent nodes. More pre¬ 
cisely, one article considers the near-gathering with termination (i.e., the robots must terminate 
their execution in finite and bounded time on two adjacent nodes) [122], while another article 
considers the near-gathering without termination (i.e., the robots must end up on two adjacent 
nodes without necessarily terminating their execution) [128]. 

The scattering problem is also studied [3]. Similarly as in discrete static environment, to 
solve the scattering problem, there must be, in finite time, at most one robot in each node of the 
dynamic graph. 

There exist articles in the literature dealing with the exploration with stop problem [105, 90, 
125, 99] where the goal is for the robots to explore the graph in finite time, and then they are 
required, also in finite time, to stop their execution once they detect that the graph has been 
explored. 

Refer to Section 5.2 and Section 8.2 for more details about existing work studying robots in 
dynamic graphs. 


3.2 Model 

We first present, in Section 3.2.1, the model of robots (set of assumptions made on robots 
including their computational model) we consider all along this thesis. This model is an extension 
of the classical model of robot networks in static graphs introduced by Klasing et al. [113] to the 
context of dynamic graphs. Section 3.2.2 defines formally what an execution of an algorithm 
using robots evolving in dynamic graphs is. Then we present, in Section 3.2.3, a hierarchy of 
models of robots. Finally, Section 3.2.4 describes different formations of robots. 

3.2.1 Assumptions 

In this section, we describe the assumptions we made on robots. First we present the common 
assumptions that we made on robots in each of the chapters of this thesis, then we present 
assumptions that may differ depending on the chapter considered. 

Common assumptions made on robots all along the chapters of this thesis. We con¬ 
sider distributed systems made of 1Z autonomous mobile entities, called robots, moving in a 
discrete and dynamic environment modeled by an evolving graph Q = ((V, Eq), (V, E \)...). V 
is a set of nodes representing the set of locations where robots may be. E t is the set of bidi¬ 
rectional edges representing connections through which robots may move from one location to 
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another one at time i. We consider fully-synchronous robots (refer to the definition of FSYNC in 
Section 3.1.1) that execute the same algorithm (an algorithm being a finite sequence of ordered 
instructions). While executing their algorithm each robot may cross at most one edge at each 
instant time (i.e., at each L-C-M cycle). The robots we study possess persistent memory; hence 
they are able to store local variables that are not reset from one L-C-M cycle to another one. 
When necessary, we index the variables with the name of the robot to clarify to which robot the 
variable belongs to. Similarly, the robots have access to functions and predicates (that we present 
below), and when necessary, we denote by name r ,t the value of a variable or a function/predicate 
named name of a given robot r after the Look phase of a given round t. The state of a robot at 
time t corresponds to the values of its variables at time t. All the robots have local vision, i.e., 
they view their own node, and the adjacent edges of their current node. 

Other assumptions made on robots. Below we present all the other assumptions made on 
robots. Depending on the chapter considered these assumptions may differ, therefore, we will 
precise which assumptions among the one below are considered at the beginning of each chapter. 

Identifications: The robots may be identified. In this case, each robot has a distinct identifier 
(denoted id) in a finite set ID of positive integers strictly greater than zero. Initially, a robot 
only knows the value of its own identifier. Conversely, the robots may be anonymous, i.e., 
they are indistinguishable from each other. 

Knowledge about the environment and robots: The robots may have no prior knowledge 
about the graph they evolved in (size, diameter, dynamics, etc.) nor on the robots (number, 
bound on size of identifiers when the robots are identified, etc.). Conversely, they may have 
access to two information: they may know the size n of the graph in which they are evolving 
in, and they may be aware of the total number 1Z of the robots evolving in the graph. 

Topology of the dynamic graph in which the robots evolve: The robots may evolve in dy¬ 
namic ring-shaped graphs. In this case, we assume that each robot has a variable dir that 
stores a direction (either left or right). For some of the algorithms this variable may also 
take the value _L, meaning no direction. We define by dir the opposite direction of dir, 
meaning that if dir is equal to right (resp. left) then dir is equal to left (resp. right). To 
simplify the presentation of the algorithms, we assume that the robots have access to the 
following local functions: 

• ExistsEdge(dir, round), with dir £ {right, left} and round £ {current, previous} 
which indicates if there exists an adjacent edge to the location of the robot at time t 
and t — 1 respectively in the direction dir in Gt and in Gt -i respectively. 

• ExistsAdjacentEdgeQ returns true if an edge adjacent to the current node of the 
robot is present, false otherwise. Note that this function is used only to simplify the 
writing of the algorithms since Exists Adj acentEdge () = ExistsEdge(right, current) 
V ExistsEdge(left, current). 

We say that a robot is edge-activated during a round t if its predicate Exists Adj acent¬ 
EdgeQ is true at time t. 

Conversely, it is possible for the robots to evolve in dynamic arbitrary-shaped graphs. 

Multiplicity detection: The robots may be endowed with weak local multiplicity detection, 
meaning that the robots are able to detect if they are alone on their current node or not, 
but they cannot know the exact number of co-located robots. When robots are endowed 
with weak local multiplicity detection, they have access to the value of the local function 
defined hereafter: 
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Figure 3.3: Illustration of the chirality. 


• ExistsOtherRobotsOnNodei) returns true if there is strictly more than one robot on 
the current node of the robot, false otherwise. 

Robots may be endowed with strong local multiplicity detection, meaning that they are 
able to count the exact number of robots that are located on their current node at any time 
t. When robots are endowed with strong local multiplicity detection, they have access to 
the value of the following local function: 

• NumberO f RobotsOnNode() that returns the exact number of robots present at the 
node of the robot. 

Orientation: We assume that when the graph considered is a ring, each robot is able to locally 
label the two ports of its current node with left and right consistently over the ring and 
time. Two different robots may not necessarily agree on this labeling. In this case we say 
that the robots do not have the same chirality, otherwise we say that the robots have the 
same chirality (i.e., the robots agree on the labeling of the ports). Refer to Figure 3.3 for 
an illustration of what the chirality is. When robots have the same chirality and evolve in 
a dynamic ring, we call Seg(u , v) the set of nodes (of the footprint of the dynamic ring) 
between node u not included and v not included considering the right direction of the 
robots of the system. Refer to Figure 3.4 for two examples of Seg(u,v) in two different 
rings. At any time, we say that a robot points to the left (resp. right) if its variable dir is 
equal to this (local) direction. We say that a robot considers the clockwise (resp. counter¬ 
clockwise) direction if the (local) direction pointed to by this robot corresponds to the 
(global) direction seen by an external observer. Through misuse of language, whether the 
robots evolve in a dynamic ring or an arbitrary dynamic graph, we say that a robot points 
to an edge when this edge is connected to the current node of the robot by the port labeled 
with its current direction. 

Communication: Robots may be unable to directly communicate with each other by any 
means. Conversely, they may be able to communicate (by direct reading) the values of 
their variables to each other only when they are located on a same node of the graph. In 
this case, the robots have access to the values of the two local functions given below: 

• NodeMateQ which gives to the robot r the set of all the states of the robots co-located 
with r (the state of r is not included in this set). 

• NodeMateldslf) which gives to the robot r the set of all the identifiers of the robots 
co-located with r (the identifier of r is not included in this set). 
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Legend : 


Nodes of Seg(u, v) 



Figure 3.4: Illustration of Seg(u, v ) in two different rings. 

3.2.2 Execution of an Algorithm 

In this section we present the notions permitting to define an execution of an algorithm using 
robots evolving in dynamic graphs. Then we define formally this concept. 

The configuration jt of the system at time t gathers the snapshot at time t of the evolving 
graph, the positions (i.e., the nodes where the robots are currently located), and the state of each 
robot at time t. We call view of a robot r at a time t the union of its state at time t, the values of 
the local functions defined in its model, and the value of the following local predicate: 

• HasMovedQ which indicates whether r has moved between time t — 1 and t (see explana¬ 
tions of the Move phase). 

The algorithms, presented in this thesis, are written under the form of an ordered set of 
guarded rules (label) :: guard — > action where label is a name to refer to the rule in the text, 
guard is a predicate on the view of the robot, and action is a sequence of instructions modifying 
its state. Whenever a robot has at least one rule whose guard is true at time t, we say that 
this robot is enabled at time t. During the Compute phase, each robot enabled by the algorithm 
executes the action associated to the first rule of the algorithm whose guard is true in its view. 

Given an evolving graph Q = (Go, Gi,...) and an initial configuration 70 , the execution e in Q 
starting from 70 of an algorithm is the maximal sequence ( 70 , 71) (71,72X72173) • • • (he., is either 
an infinite sequence or a sequence such that its last configuration is a terminal configuration 
which means a configuration with no enabled robot) in which at least one robot is enabled in 
each configuration (except in the last one if the sequence is finite), and where, for any i > 0 , 
the configuration 7 j + i is the result of the execution of a fully-synchronous round by all enabled 
robots from 7 j that is composed of three atomic and synchronous phases: Look, Compute, Move 
defined as follows. 

During the Look phase, each robot captures its view at time t. 

During the Compute phase, each robot executes its algorithm that may modify some of its 
variables (in particular dir) depending on its current state and on the values of the local func¬ 
tions/predicates updated during the Look phase. 

The Move phase consists of moving a robot in the direction it points to if there exists an 
adjacent edge in that direction to its current node, otherwise (i.e., the adjacent edge is missing) 
the robot is stuck and hence remains on its current node. In the case where the direction dir of a 
robot is _L, the robot remains on its current node. Note that the i th round is entirely executed on 
Gi and that the transition from Gj to Gj+i occurs only at the end of this round. 
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Note that the initial configuration 70 from which the execution starts belongs to a set T which 
includes all the initial configurations from which the algorithm may start. 

3.2.3 Hierarchy of Models 

We have presented, in Chapter 2, a hierarchy of dynamic graphs (refer to Figure 2.2 and Fig¬ 
ure 2.5). In this section, we present a hierarchy of models of robots. A model of robots includes 
the computational model of robots (refer to Section 3.1.1 that presents three computational mod¬ 
els of robots: FSYNC, SSYNC and ASYNC) and a set of capacities that robots can possess (refer 
to Section 3.1.3 that describes the main capacities possessed by robots in the state of the art). 
It is important to define a hierarchy of models of robots in order to be able to compare multi¬ 
ple algorithms written in different models: this hierarchy of models has deep consequences on 
calculability, refer to Section 4.1 for more details. 

Formally, the computational model of robots corresponds to the subset of executions among 
all the possible executions that satisfy the synchronization of the phases of the L-C-M cycles of 
the robots considered. A computational model x is stronger than (denoted >-) a computational 
model y if the set of allowed executions induced by x includes the set of allowed executions 
induced by y. In the case of the three computational models that we have presented in the state 
of the art (see Section 3.2), we have: the ASYNC model is stronger than the SSYNC and the 
FSYNC models, and the SSYNC model is stronger than the FSYNC model. To sum up, we have: 
FSYNC 7 SSYNC -< ASYNC. 

Similarly, each of the capacities presented in Section 3.1.3 corresponds to the subset of execu¬ 
tions among all the possible executions that satisfy the properties induced by these capacities. In 
the same way, some capacities are stronger than others: a capacity x is stronger than (denoted 7 ) 
a capacity y, if the set of allowed executions induced by x includes the set of allowed executions 
induced by y. For instance, the anonymous assumption on robots is stronger than the identified 
assumption on robots. Indeed, if an algorithm solves a problem thanks to anonymous robots, it 
obviously solves the same problem in the same model except that robots are identified. 

Formally, a model of robots is the intersection of the computational model of the robots and 
of all the capacities possessed by the robots. A model J\4 is stronger than (denoted >) a model 
AT if AT is included in AT As an example, the model composed of asynchronous, anonymous, 
oblivious robots without chirality is stronger than the model composed of fully-synchronous, 
identified robots with persistent memory and with chirality. 

Note that the relation between the models is a partial order. Indeed, some models are not 
comparable: for instance, the model composed of asynchronous and identified robots is not com¬ 
parable to the one constituted of fully-synchronous and anonymous robots. Refer to Figure 3.5 for 
an illustration of a hierarchy of models of robots. In this figure, the models of robots A l gathering, 
Mexploration , and M se i f - stabilizing exploration are models that we use in this thesis respectively in 
Chapter 6, in Chapter 9, and in Chapter 10. 

3.2.4 Towers 

In this section, we present some formations of the robots that we used to prove the correctness 
of our algorithms. 

When a robot is alone on its current node, we say that it is isolated. At the opposite, if there 
are multiple robots on a same node, we say that they form a tower. Intuitively, a tower captures 
the simultaneous presence of all robots of a given set on a node at each time of a given interval. 
We require either the set of robots or the time interval of each tower to be maximal. Note that 
the tower is not required to be on the same node at each time of the interval (robots of the tower 
may move together without leaving the tower). 

Definition 3.1 (Tower). A tower T is a couple ( S,6 ), where S is a set of robots (]5| > 1) and 
6 = [t s ,t e ] is an interval o/N, such that all the robots of S are located at the same node at each 
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Figure 3.5: A hierarchy of models of robots. 
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Figure 3.6: Example of a long-lived tower and a short-lived tower. 


instant of time t in 9 and S or 6 are maximal for this property. Moreover, if the robots of S move 
during a round t £ [t s ,t e [, they are required to traverse the same edge. We say that the robots of 
S form the tower at time t s and that they are involved in the tower between time t s and t e . 

We distinguish two kinds of towers according to the agreement of their robots on the global 
direction to consider at each time there exists an adjacent edge to their current location (exclud¬ 
ing the last one). If they agreed, the robots form a long-lived tower while they form a short-lived 
tower in the contrary case. This implies that a short-lived tower is broken as soon as the robots 
forming the tower are edge-activated, while the robots of a long-lived tower move together at 
each edge-activation of the tower (excluding the last one). Refer to Figure 3.6 for an example of 
a long-lived tower and a short-lived tower. 

Definition 3.2 (Long-lived tower). A long-lived tower T = (S, [t s , t e \) is a tower such that there 
is at least one edge-activation of all robots of S in the time interval [t s ,t e [. 

Definition 3.3 (Short-lived tower). A short-lived tower T is a tower that is not a long-lived 
tower. 

For k > 1, a long-lived (resp., a short-lived) tower T = (S', 0) with |S| = k is called a fe-long- 
lived (resp., a £:-short-lived) tower. 
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The goal of this thesis is to extend the notions of speculation and gracefully degrading to 
robot networks. Speculative algorithms are algorithms that solve a problem in any execution but 
are optimized (for instance in terms of the time complexity) for the most frequent executions. 
Gracefully degrading algorithms are conceived to circumvent impossibility results. When a prob¬ 
lem is impossible to solve in some executions, a gracefully degrading algorithm may be conceived 
to solve this problem: it will solve the problem in the executions in which it is possible to do so, 
and in the executions in which the problem is impossible to solve, the algorithm will provide an 
approached solution to the problem. 

To define formally speculative algorithms and gracefully degrading algorithms it is then cru¬ 
cial to define the notions of impossibility results and the meaning of “an algorithm solves a prob¬ 
lem.” In this chapter, we define in Section 4.1 these notions in the context of robot networks 
evolving in dynamic graphs. Then, in Section 4.2, we present a framework that helps to prove 
impossibility results in dynamic graphs. 

4.1 Implications of Models and Classes of Dynamic Graphs’ Hi¬ 
erarchies 

Thanks to the hierarchy of models of robots and the hierarchy of dynamic graphs, we are 
able to compare multiple solutions solving a same problem. When studying distributed systems, 
the classical approach is to determine the necessary and sufficient conditions to solve a problem. 
In this thesis, we adopt the same approach but applied to robot networks evolving in dynamic 
graphs. All the definitions and properties presented in this paragraph are crucial since they per¬ 
mit to determine the strongest combination of models of robots and of classes of dynamic graphs 
in which a problem can be solved. Note that, since some models of robots are not compara¬ 
ble and some classes of dynamic graphs are not comparable, it is possible to have multiple such 
combinations. 

We present below definitions permitting to determine the strongest combinations of models 
of robots and of classes of dynamic graphs in which a problem can be solved. 

Definition 4.1 (Specification of a problem). The specification of a problem V, denoted S£p, is 
the set of all the executions that satisfy V. 

There exists an infinity of specifications, this is why this notion is defined thanks to a set of 
executions induced by some properties. 

Note that, some problems are comparable (i.e., some problems are stronger than others): a 
problem V is stronger than a problem V' if SS-p C S£p". For instance, the gathering problem 
in dynamic graphs is stronger than the near-gathering problem without termination in dynamic 
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graphs. Indeed, in an execution where the gathering problem is satisfied, all the robots terminate 
their execution on a same node of the graph in finite time. This execution also satisfies the 
near-gathering problem without termination. However, in an execution where the near-gathering 
problem without termination is satisfied, all the robots must end up on two adjacent nodes of 
the graph without necessarily terminating their execution. This execution does not satisfy the 
gathering problem. 

Before presenting the fundamental notions of this section (i.e., which are the necessary and 
sufficient conditions to solve a problem), we need to introduce the meaning of “an execution of an 
algorithm under a model of robots.” It corresponds to the intersection of the possible executions 
of the algorithms with the possible executions induced by the models of robots. 

Definition 4.2 (Algorithm satisfying a problem in a class of evolving graphs under a model of 
robots). An algorithm A, starting from a set of initial configurations T, satisfies the problem V 
(specified by S£p) in a class of evolving graphs C under a model of robots A4, if and only if any 
execution of A, starting from any initial configuration 70 6 T, under Ai in any evolving graph 
Q € C belongs to S£p. 

Definition 4.3 (Problem impossible in a class of evolving graphs under a model of robots). A 
problem V is impossible to solve in a class of evolving graphs C under a model Ai of robots if for 
any algorithm A, starting from a set of initial configurations T, there exists an execution of A, 
starting from an initial configuration 70 G T, under Ai in an evolving graph Q E C that does not 
belong to S£p. 

As indicated in Section 2.1.2 and as shown on Figure 2.2, there exists a hierarchy of classes of 
dynamic graphs. This hierarchy permits to deduce some important properties: 

Corollary 4.1. If a problem V is impossible in a class of dynamic graphs C under a model Ai of 
robots, then V is impossible under Ai in any class of dynamic graphs C' such that C C C. 

Corollary 4.2. If an algorithm A satisfies a problem V in a class of dynamic graphs C under 
a model A4 of robots, then A satisfies V under A4 in any class of dynamic graphs C such that 
C' c C. 

Similarly, as indicated at the beginning of this section, there exists a hierarchy in the models 
of robots. This hierarchy permits to deduce the following properties: 

Corollary 4.3. If a problem V is impossible in a class of dynamic graphs C under a model of 
robots Ai, then V is impossible in C in any model of robots M! such that Ai <1 Ai'. 

Corollary 4.4. If an algorithm A satisfies a problem V in a class of dynamic graphs C under a 
model of robots Ai, then A satisfies V in C in any model of robots Ai' such that Ai' <\ Ai. 

4.2 A General Framework for Impossibilities in Dynamic Graphs 

In static graphs there are problems that are impossible. For instance, the consensus problem 
(in which processes have to decide, in finite time, the same value among a set of values proposed by 
each of the processes) is impossible in asynchronous systems even when at most one process may 
crash [82], When considering dynamic systems, obviously, the number of impossibility results 
increases due to the dynamics. 

To prove that a problem is impossible in dynamic graphs, we have to prove that, for each 
algorithm A , it exists a dynamic graph where A does not succeed to satisfy the specification of 
the problem. We can construct this dynamic graph by recurrence: construct a dynamic graph Qi 
until a time prove that until time ti the specification of the problem is not (always) satisfied in 
Qi, and then construct another dynamic graph Qi+\ until a time 1 (with 1 > ti) such that 
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Qi -|_i is identical to Gi until time ti and prove that between time ij and ti + \ the specification of the 
problem is still not (always) satisfied, ... Thanks to the recurrence, we are able to build a sequence 
of dynamic graphs in which the execution of any algorithm does not satisfy the specification of 
the problem on ever-growing bounded prefixes. To end the impossibility proof, we want to reach 
the limit, with the intuition that the execution of the algorithm on the limit of the sequence 
shares a common growing prefix with the executions in every graph of the sequence (and hence 
violates infinitely often the specification of the problem). 

Braud-Santoni et al. [34] prove that this intuition is true. Indeed, they propose a generic 
framework to prove formally impossibilities in dynamic systems. This framework is designed for 
the message passing model. However, it is general enough to be used in other models. It is based 
on a theorem that ensures that, if we take a sequence of evolving graphs with ever-growing com¬ 
mon prefixes (that hence converges to the evolving graph that shares all these common prefixes), 
then the sequence of corresponding executions of any deterministic algorithm also converges. 
Moreover, the execution to which it converges is the execution of this algorithm in the evolving 
graph to which the sequence converges. 

As indicated, even if this generic framework is designed for the message passing model, it is 
general and may be used in other models. Indeed, the proof of the theorem of this framework 
only relies on the determinism of algorithms and indistinguishability of dynamic graphs. These 
arguments are translatable in multiple models. In particular, this framework can be used in our 
model (see Sections 2.2 and 3.2). Hence all along this thesis, we will use this framework in order 
to prove formally our impossibility results. 

In our model, the theorem of Braud-Santoni et al. [34] can be formalized as follows. 

First, Braud-Santoni et al. define the distance between any pair of evolving graphs: it is a 
function inversely proportional to the length of their longest common prefix. This distance allows 
to use the classical definition of a limit. 

Then, given an algorithm A, starting from a set of initial configurations T, under a model A i 
of robots and an evolving graph Q included in a class C of evolving graphs, Braud-Santoni et al. 
define the (A, Al, Q)— output as a function that associates to any time t the configuration yt of 
the system at time t and the views at time t of each robot resulting from the execution of A in 
G starting from a configuration 70 G T. Let O be the set of all (A, A4, G)~ outputs over all the 
evolving graphs Q G C and over all the initial configurations 70 G T. A similar distance can be 
defined on O in a similar way as previously. 

The theorem proved by Braud-Santoni et al. is then the following one. 

Theorem 4.1 ([34]). For any deterministic algorithm A under a model Af of robots, if a sequence 
{Gn)n& n °f evolving graphs belonging to a class of dynamic graphs C converges to a given evolving 
graph Q u G C, then the sequence (o n ) n eN °f the (A,M,Q n ) — outputs converges to o u G O. 
Moreover, o u is the (A, Af, GA)~ output. 

See Figure 4.1 for an illustration of the theorem of Braud-Santoni et al. to construct impossi¬ 
bility result. 
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Legend: 

part of the execution in which the 
specification of the problem is satisfied 



Figure 4.1: Illustration of the theorem of Braud-Santoni et al. [34]. 
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In this part, we present, in Chapter 6, a gracefully degrading algorithm in dynamic rings. 
Intuitively, a gracefully degrading algorithm must satisfy the problem studied in dynamic graphs 
in which it is possible to do so, and when the dynamics increase and make the problem impossible, 
the algorithm should provide a best effort solution (i.e., an approached solution to the original 
problem). The conception of a gracefully degrading algorithm for a given problem is motivated 
by the impossibility of this problem in a certain class of dynamic graphs. 

Our gracefully degrading algorithm solves the gathering problem which consists for the robots 
of the system to be located on a same node of the graph in finite time. The conception of a 
gracefully degrading algorithm implies to consider approached solution(s) to the original problem. 
We only consider approached solutions to the gathering problem that weaken the termination 
of this problem, i.e., we authorize at most one robot to never terminate its execution, and all 
the robots that terminate their execution do so on a same node of the graph. Hence, we keep 
unchanged the essence of the problem (robots terminate on a same node). The conception of this 
algorithm is motivated by the impossibility of the gathering problem in AC rings [122]. 

In this chapter, we first present, in Section 5.1, the state of the art about gracefully degrading 
algorithms, then, in Section 5.2, we present the state of the art about gathering in dynamic 
graphs. Finally, we present, in Section 5.3, our motivation to conceive a gracefully degrading 
algorithm in dynamic graphs. 

5.1 Graceful Degradation 

5.1.1 Definition 

As indicated in Section 2.1.2, there are multiple classes of dynamic graphs, each of them 
regroups dynamic graphs having the same temporal connectivity properties. The weakest class 
of dynamic graphs is the class of ST graphs: in this class the connectivity assumptions are strong 
since each edge of a ST graph is always present. Obviously, when the connectivity assumptions 
become weaker (i.e., when the edges are less present in the graphs), some problems, solvable 
in ST graphs, become impossible. For instance, the gathering problem (where robots must be 
located in finite time on a same node of the graph) is impossible to solve in AC rings [122]. Call 
V a problem that becomes impossible when the dynamics increase. 

Sometimes, applications are executed in environments in which the dynamics cannot be 
known in advance, or in environments in which the dynamics evolve with times. As an exam¬ 
ple, if we consider the dynamic graph modeling a map in which streets are opened and closed 
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over time due to traffic jam in a town, at some hours there is little traffic and the map can be 
represented thanks to a ST graph, but at other moments the traffic is so intense that the map 
is modeled by a COT graph. Assume that the problem V may be considered in a changing en¬ 
vironment such that the dynamics of this environment correspond sometimes to a dynamic in 
which V is solvable but at some other time it corresponds to a dynamic that makes the problem 
V impossible. 

In order to be able to consider the problem V in such dynamic environment, it would be 
convenient to have an algorithm that solves V in some dynamic environments in which it is 
solvable, and provides a best effort solution to V when the dynamics increase. In other words, 
it would be convenient to have an algorithm A that simultaneously satisfies the specification 
of V in some dynamic environments in which it is solvable, and satisfies the specification of a 
weaker problem than V but that is related to the problem V when the dynamics increase. Such 
algorithms are called gracefully degrading algorithms, and have been introduced by Biely et al. 
[201- 

Note that A may satisfy different weaker specifications of V in different dynamic classes of 
dynamic graphs (hopefully with stronger requirements when temporal connectivity increases). 

More formally, we can define a gracefully degrading algorithm as follows: 

Definition 5.1 (Gracefully degrading algorithm). Given a model JA, a problem Vo, a set Sp = 
{Vi ,...,Vk} of problems either equal to or weaker than Vo, with |5-p| > 1, and a set Sc = 
{Co ,..., Ck} of classes of dynamic graphs such that: 

1. |<Sc| > 2. 

2. For all i, with 1 < i < k, Cq C C*. 

3. For all i, with 0 < i < k, and for all j, with 0 < j < k, if Ci C Cj then Vi is either stronger 
than or equal to the problem Vj (i.e., SSp i £ S£ Vj ). 

4■ There exists at least one i, with 1 < i < k, such that Vq is impossible to solve in Ci under 

M. 

a {Vo, S'p , Sc)-gracefully degrading algorithm A for Vo under a model M. is an algorithm such 
that: 

• For all i, with 0 < i < k, A satisfies Vi under M. in Ci. 

We say that an algorithm is gracefully degrading if there exist a problem Vo, a set of problems 
S'p, and a set of classes of dynamic graphs Sc such that this algorithm is (Vo,Sp, Sc (-gracefully 
degrading. When necessary, we clarify the classes of dynamic graphs saying that an algorithm is 
gracefully degrading with respect to a family of classes of dynamic graphs Ci, ..., C& if there exist 
a problem Vo, and a set of problems Sp such that this algorithm is {Vo ,Sp, {C*,... Ck }(-gracefully 
degrading. 

Above, we give a formal definition of a gracefully degrading algorithm for robot networks. 
This definition is suitable to the intuition given of this notion. Indeed, the points 1 and 2 of 
the definition permit to indicate that the problem must be studied in a dynamic environment 
that may change with time, and such that there is a relation between the changes (considering 
a class of dynamic graph studied, there is at least another class such that the two classes are 
comparable). Moreover, the combination of points 3 and 4 imposes that a set of weaker versions 
of the original problem are considered. A gracefully degrading algorithm for this problem should 
solve the original problem in the weakest dynamics studied and each of the weaker versions of the 
problem when the dynamics of the environment increase: more the dynamics increase more the 
problem solved is weak. Besides, the conception of a gracefully degrading algorithm is motivated 
by an impossibility result, and the point 4 of the definition imposes that the original problem 
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is impossible to solve in at least one of the classes of dynamic graphs considered. This point is 
mandatory to avoid the conception of gracefully degrading algorithms that consider only classes 
of dynamic graphs in which the problem studied is solvable and that are gracefully degrading 
only because they cannot succeed to find an appropriate solution to the problem. 

5.1.2 State of the Art 

The gracefully degrading approach has been introduced by Biely et al. [20]. They prove that 
the consensus problem (where processes have to decide irrevocably, in finite time, the same value 
among a set of values initially proposed by each of the processes) is not solvable in synchronous 
directed dynamic systems when the connectivity assumptions between the communicating pro¬ 
cesses are weak. Then they provide a consensus algorithm that gracefully degrades to k-set 
agreement (where processes have to decide irrevocably, in finite time, k values among a set of 
values initially proposed by each of the processes) when the connectivity between the communi¬ 
cating processes decreases. Note that the value of k is not fixed, and changes from execution to 
execution depending on the dynamics of the system. 

Biely et al. [20] have introduced the graceful degradation in the context of dynamic systems. 
However, the idea of gracefully degrading the specification of a problem depending on the envi¬ 
ronment is not a new idea. Indeed, in indulgent algorithms [5, 118, 131] the same idea is exploited 
with respect to the asynchronism of the system. 

More precisely, indulgent algorithms have been defined by Alistarh et al. [5] as algorithms that 
guarantee correctness when the system is synchronous, and when the system is asynchronous and 
the problems solved by the algorithms become impossible then they maintain the safety of the 
problems. 

Alistarh et al. [5] present a technique to transform a synchronous algorithm into an indulgent 
algorithm. Considering a system where up to t = N/2 — 1 among N processes may crash (i.e., 
may stop to perform their algorithm), they apply their transformation on two well-known prob¬ 
lems: the renaming problem (where each correct process that starts its execution with a unique 
identifier i, with 0 < i < I for some large I, has to end up with a unique new identifier j such 
that 0 < j < J, where J < I and J is as small as possible), and the consensus problem (where 
correct processes must decide irrevocably, in finite time, one value among a set of values initially 
proposed by each of the processes). In case of a synchronous system, their indulgent renaming 
algorithm satisfies the specification of the renaming problem given identifiers between 1 and N. 
In case of an asynchronous system where processes may be subject to crash, renaming the correct 
processes with identifiers between 1 and N is not possible. In this setting, the indulgent algorithm 
of Alistarh et al. renames the correct processes with identifiers between 1 and N + t. In the case 
where the system is synchronous, their indulgent consensus algorithm ensures the weak termi¬ 
nation (each correct process will eventually decide but it may continue to run the protocol after 
the decision) and quiescence (eventually the protocol stops sending messages, but the processes 
may continue to participate in the protocol). In the case where the system is asynchronous and 
some processes may crash, the consensus problem is impossible to solve [82]. In this setting, their 
indulgent consensus algorithm does not ensure weak termination or quiescence anymore: the de¬ 
cision of the processes is delayed until the system becomes synchronous, preserving the safety of 
the problem. 

Similarly, Lamport [118], and De Prisco et al. [131], present an indulgent algorithm solving 
the consensus problem when processes may crash: when the system is synchronous the consensus 
is solved, however, when the system is asynchronous the termination of the algorithm is not 
ensured. 

With the same underlying idea than gracefully degrading algorithms and indulgent algo¬ 
rithms, Vaidya and Pradhan [140] propose an algorithm that degrades the specification of a 
problem when the number of Byzantine faults (i.e., arbitrary faults) in the system increases. 
They consider the consensus problem in synchronous systems where processes may be subject 
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to Byzantine faults. Lamport et al. [119] have proved that to solve the consensus problem in 
synchronous systems in the presence of 6 Byzantine faults, the system must be composed of at 
least 3*6+1 processes. The algorithm proposed by Vaidya and Pradhan solves the consensus 
problem when the number of Byzantine faults is less or equal to 6, however they authorize the 
correct processes to agree on two different values when the number of Byzantine faults in the 
system increases above 6. 

In the state of the art about robots, there is neither indulgent algorithms nor algorithms ex¬ 
plicitly exploiting the gracefully degrading approach. However, some of the articles dealing with 
the gathering in dynamic graphs are gracefully degrading without knowing it (refer to Section 5.3 
for an overview of these articles). 


5.2 State of the Art About Gathering in Dynamic Graphs 

Although there exists a huge literature on gathering/rendezvous in continuous space [43, 71, 4] 
and in discrete static environments [113, 53, 135], these studies fall out of the scope of this thesis. 
In this section, we present only articles dealing with gathering in dynamic environments. 

There are few articles solving the gathering/rendezvous problem while considering dynamic 
environments. However, there are some articles dealing with the gathering problem in static 
graphs while some elements of the model introduce a kind of dynamics. These articles are in¬ 
teresting to study since they may provide some clues to deal with real dynamic environments. 
We present such articles in Section 5.2.1. In Section 5.2.2, we present the state of the art about 
gathering in dynamic graphs. 

5.2.1 Towards Dynamic Graphs 

The articles we present in this section consider the gathering/rendezvous problem in static 
graphs where some elements of the model permit to introduce a kind of dynamics. 

Mobile malicious entity. Indeed, Das et al. [54, 53] consider the gathering problem while 
there exists in the undirected network one mobile malicious entity that prevents robots from 
visiting the node where it is located. In particular, the robots cannot move to a node in which 
the malicious entity is located. The malicious entity moves arbitrarily fast, but it cannot stop on 
a node where a robot is already located. Moreover the edges are crossed by the robots as well as 
by the malicious entity in a FIFO way. 

Therefore, in this setting, it is possible to simulate a missing edge: a missing edge is an 
adjacent edge to the node where the malicious entity is located. It is also possible to simulate 
eventual missing edge: in the case where the malicious entity does not move after a certain time, 
all the adjacent edges to its position are eventual missing edges. However, this model does not 
permit to represent fully dynamic environment since the disappearance of edges is dependent on 
the positions and movements of the robots. Indeed, since the malicious entity cannot be located 
on the same node as a robot, missing edges are dependent on the positions of the robots. And 
since the edges are crossed in a FIFO way, missing edges are dependent on the movements of 
the robots (and hence of the algorithm). Moreover, in this setting, it is not possible to have two 
robots located on two adjacent nodes such that they are separated by a missing edge. 

In this “dynamic setting’' Das et al. [54] consider asynchronous, anonymous robots. The robots 
possess finite memory and are able to communicate when they are located on a same node. They 
do not have any prior knowledge about the graph in which they are evolving, in particular, they 
do not know the size of the graph. Initially there is at most one robot in each node. The robots 
do not know the total number of robots present in the system. In this context, the authors first 
give a set of initial configurations T (whatever the topology of the graph) for which the gathering 
problem is not solvable. T is the set of initial configurations for which the malicious entity may 
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disconnect the graph such that not all the robots are on the same connected component. As 
indicated by the authors, in ring-shaped graphs no execution of any algorithm can reach the 
configurations of T. They then provide a gathering algorithm for robots with chirality evolving 
in rings with one marked node. They also consider robots without chirality evolving in rings, 
and prove that if there are an even number of robots, the gathering problem is not solvable even 
if there is one marked node in the ring. They thus provide an algorithm solving the gathering 
problem for rings with one marked node in the case where there are an odd number of robots 
without chirality in the system. While executing this algorithm, the number of edges crossed by 
the robots is in 0(7Z * n) (with 1Z the total number of robots in the system and n the size of the 
ring). Finally, they study robots with chirality evolving in grids. For this topology, they prove 
that, to solve the gathering, robots need to have a visibility range at distance 2 if the robots 
are initially located on consecutive nodes. They provide then an algorithm solving the gathering 
in this setting (the graph is a grid and the robots have the same chirality, are endowed with a 
visibility range at distance 2, are initially located on consecutive nodes and are not initially in a 
configuration that belongs to T). This algorithm is achieved in 0(71 2 ) edge traversals, whatever 
the size of the grid. All their results are true for a number of robots greater or equal to two. 

Das et al. [53] conduct a similar study. In the same setting, except that the robots are fully- 
synchronous, they prove that the gathering problem is not solvable when the number of robots 
without chirality is even and the size of the ring is odd, even if the ring possesses one marked 
node. When the size of the ring is even or the number of robots without chirality is odd, they 
provide an algorithm solving the gathering problem when the ring possesses one marked node. 
All their results are true for a number of robots greater or equal to two. When the number of 
robots is strictly greater than two, their algorithm achieves the gathering in 0(n ) rounds, and 
with 0(n*7Z) edge traversals. 


Delay faults. Chalopin et al. [41] consider the problem of rendezvous (i.e., gathering of two 
robots) in undirected graphs where the robots without chirality may be subject to delay faults: 
if a robot is faulty at a time t then it does not move during the L-C-M cycle of time t. More 
precisely, they consider three kinds of delay faults: random faults (where each robot may be 
faulty at each round with a probability p such that 0 < p < 1), unbounded faults (where a robot 
is faulty a finite number of consecutive rounds), bounded faults (where a robot is faulty a finite 
and bounded number of consecutive rounds). Moreover, a faulty robot is aware that it is faulty. 

Since Chalopin et al. consider only two robots, and since these two robots stop their execu¬ 
tion when they are located on a same node, their setting can simulate dynamic directed graphs. 
Indeed, a missing arc is an adjacent outgoing arc to a faulty robot. However, their setting can¬ 
not simulate undirected dynamic graphs since the faults they consider cannot simulate a missing 
edge: only one of the two robots located on two adjacent nodes and trying to cross the same edge 
in opposite directions during the same round may be faulty, which is not the behavior induced by 
a missing edge. Note that, if there are more than two robots in the system, and if when two robots 
(or more) meet they do not stop their execution, then their setting cannot simulate directed dy¬ 
namic graphs anymore. Indeed, if two robots are located on a same node and try to cross the 
same arc at the same round, they should behave in the same way: either the arc is missing and 
both robots should be faulty to simulate this, or the arc is not missing and none of the robots 
should be faulty to simulate this, but in their model, it is possible to have only one of these robots 
faulty. 

In this setting, Chalopin et al. [41] consider fully-synchronous robots that possess distinct 
positive identifiers. They only know their own identifier. They evolve in any anonymous graph, 
and do not know the topology of the graph in which they evolve or the size of the graph. Moreover, 
even if the robots are fully-synchronous, they do not start necessarily their execution at the same 
round. When the robots are subject to random faults, the authors provide an algorithm solving 
the rendezvous problem in a number of edge traversals polynomial in the size of the graph and 
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polylogarithmic in the larger identifier of the robots, with a very high probability. When robots 
are subject to unbounded faults, the authors prove that the rendezvous problem is unsolvable, 
even when the graph is a ring (as indicated by the authors, in the case where the robots have 
the same chirality and know the size of the graph, it is possible to solve the rendezvous problem 
on rings even if robots are subject to unbounded faults). However, in this setting, the authors 
give a rendezvous algorithm functioning in arbitrary trees. This algorithm solves the rendezvous 
problem in 0(n * l ) edge traversals, where n is the size of the network and l is the smaller 
identifier of the robots. The authors show that the lower bound to solve the rendezvous problem 
in arbitrary trees is in Q(l) edge traversals. Finally, they provide a rendezvous algorithm for any 
graph topology when robots are subject to bounded faults. Their algorithm executes, to solve 
the rendezvous problem, a number of edge traversals polynomial in n, and logarithmic in the 
bound of consecutive rounds during which a robot may be faulty and in the larger identifier of 
the robots. 

5.2.2 Dynamic Rings 

There exist in the literature 4 articles studying the gathering or rendezvous problem in dy¬ 
namic graphs. Each of these articles considers robots evolving in dynamic rings, and deal with a 
different kind of dynamics. We detail below each of these articles depending on their dynamics. 


With probabilistic appearance of edges. Yamauchi et al. [142] consider the rendezvous 
problem in undirected, simple, anonymous, and dynamic rings. In the dynamic rings they con¬ 
sider, at each instant time, the presence of each edge is randomly decided with a probability 

p. 

Since the edges of a dynamic ring appear and disappear, the authors propose two different 
models in which the labels of the ports may change with time. The first model they consider, 
called the fixed port numbering, is a model in which the labels of the ports of the edges never 
change. In other words, the labels of the ports of the edges correspond to those in the footprint of 
the dynamic graph. The second model they consider, called the non-fixed port numbering, give 
randomly a number (not already assigned) to the ports of the edges of the dynamic graph that 
appear at a given time (the edges that appear at a time t and are still present at a time t + 1 keep 
unchanged their labels that were assigned at time t). 

The authors consider two fully-synchronous anonymous robots without chirality. Each robot 
knows that there are only two robots in the system. Robots are endowed with persistent memory. 
Robots are able to see the adjacent edges incident to their current node. They are endowed with 
local strong multiplicity detection (i.e., the robots know the exact number of robots located on 
their current node). 

The authors provide an algorithm where, at each round until the rendezvous occurs, when a 
robot crosses an edge it remembers the port from which it arrives at the node, and then waits 
to cross an edge with a different port label. They analysis this algorithm under the two different 
models of port numbering they proposed. 

While considering the fixed port numbering model, their algorithm is equivalent to the follow¬ 
ing one: each robot chooses a direction and keeps to move in that direction until the rendezvous 
occurs. The authors prove that if the two robots consider initially opposite global directions then 
the rendezvous occurs in 0{n ) rounds; otherwise it occurs in 0(n*d ) rounds, where d is the initial 
distance (in the footprint) between the two robots. 

While considering the non-fixed port numbering model, the authors prove that when p is 
large, then the behavior of the robots is quite identical as in the fixed port numbering model. 
When p is small their algorithm is equivalent to a random walk. Surprisingly, when p is small, 
the authors prove that the rendezvous occurs in an expected time smaller than in the case of the 
fixed port numbering model. 
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In 7Z£ rings. Izumi et al. [110] consider the gathering problem in anonymous, and undirected 
TZS rings. Each node of the ring is endowed with a whiteboard on which robots may write and 
read some data when they are located on this node. 

The authors focus on robots with chirality, possessing persistent memory and which know 
the total number of robots 7Z in the system. The system is asynchronous. Some additional 
assumptions are made on this asynchrony to coordinate the L-C-M cycles of the robots and the 
appearance/disappearance of edges: 

• Edges cannot disappear while they are crossed by a robot. 

• The delay between the transitions from one static graph to another static graph of the 
evolving graph is long enough to permit the robots to visit all the nodes that are part of the 
connected component in which they are located. 

In this setting, the authors consider three different models: the global detection model in 
which the robots are able to detect the time at which the evolving graph transitions from one 
static graph to another different one; the senri-local detection model in which the robots are able 
to detect the time at which the edges of the connected component in which they are located 
change (i.e., appear or disappear); and the local detection model in which the robots are able to 
detect the time at which the edges of the node in which they are located change. 

First, the authors show that if the positions of the robots in the initial configuration are 
periodic and if the connected components in each Gi (with i E N) of the evolving graph represent 
a periodic sequence of segment lengths then the gathering is impossible for some specific periods. 
Their result is true even if the robots are studied in the global detection model. 

Then the authors present some deterministic algorithms solving the gathering in the semi- 
local and local detection models. In each of these algorithms, in the case where the gathering is 
not possible, the robots are allowed to continue their execution forever. 

In AC rings. Di Luna et al. [122] consider robots evolving in AC undirected rings. The 
rings studied are not anonymous: the nodes where the robots are initially located are identi¬ 
cally marked. Initially, there is at most one robot on each node of the ring. Hence, there are as 
many marked nodes as robots in the system. 

The authors focus on fully-synchronous robots, i.e., all robots execute their L-C-M cycles 
synchronously and atomically. The robots they consider are anonymous, not able to directly 
communicate, endowed with persistent memory, and endowed with strong local multiplicity de¬ 
tection, i.e., each robot is able to know the exact number of robots located on its current node. 
More precisely, in the model considered by Di Luna et al. the nodes are divided into three parts 
(two parts for each port of the node and a part at the middle of the node), and each robot is able 
to know the exact number of robots that are located on each part of its current node. Robots are 
not able to know if the adjacent edges to their current node are present or missing. Moreover, 
in each of the algorithms presented by Di Luna et al., the robots know either 7Z (the number of 
robots present in the system) or n (the size of the ring). 

In this setting, the authors prove that the gathering problem is impossible even if the robots 
have the same chirality, are endowed with cross detection (i.e., ability to detect, when traversing 
an edge, whether some robot is traversing it in the other direction) and know both 1Z and n. 
Intuitively, this impossibility holds because in an AC ring it is possible to prevent two given 
robots to meet themselves by retrieving at each instant time the edge (if any) that permits them 
to meet, since it is allowed to have one missing edge at each instant time. 

To circumvent this impossibility, the authors consider a weaker specification of the gathering 
problem, called the near-gathering: the robots must end up on two adjacent nodes of the dynamic 
ring. More precisely, they consider the near-gathering problem with termination (i.e., in finite 
and bounded time all the robots terminate their execution on two adjacent nodes of the dynamic 
ring). 
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No chirality 

Chirality 

Cross detection 

0(n) 

0(n ) 

No cross detection 

0(n 2 ) 

0(n * log(n )) 


Table 5.1: Number of rounds necessary for the algorithms provided by Di Luna et al. to solve 
the near-gathering depending on chirality and cross detection capacities of the robots. 


The goal of their study is to determine the feasibility of the near-gathering depending on 
chirality, and cross detection. 

First, the authors prove that, whatever the chirality and cross detection capacities of the 
robots, if the initial positions of the robots are periodic then the near-gathering is not solvable. 
Denote T the set of initial configurations in which the positions of the robots are periodic. 

They also prove that, if the robots have no chirality and are not endowed with cross detection, 
in addition to the set of initial configurations in T, the near-gathering is impossible when the 
initial positions of the robots present a unique axis of symmetry passing through two edges of the 
ring. 

Then for each combination of the capacities of the robots (chirality and cross detection), 
they provide an algorithm solving, in finite and bounded time, the near-gathering for the initial 
configurations in which it is possible to do so. For each combination of the capacities of the 
robots, we present, in Table 5.1, the number of rounds necessary for the algorithms provided by 
Di Luna et al. to solve the near-gathering. Moreover, when their algorithms are executed starting 
from an initial configuration from which the near-gathering is impossible, the robots succeed, in 
finite time, to detect the impossibility. 

In COT rings. As indicated previously, Di Luna et al. [122] prove that the gathering is impos¬ 
sible to solve in AC rings. Their arguments to prove this impossibility are quite general, and can 
be applied in most models of robots. Moreover, since COT rings include AC rings, the gathering 
is also impossible to solve in COT rings. 

Because of this impossibility, Ooshita and Datta [128] consider the near-gathering problem 
in COT anonymous, undirected rings. More precisely, they consider the near-gathering without 
termination (i.e., in finite time all the robots must end up on two adjacent nodes of the dynamic 
ring without necessarily terminating their execution). 

The authors consider fully-synchronous robots without chirality. The robots possess distinct 
identifiers. Initially, each robot knows its own identifier, but does not know the identifier of the 
other robots. None of the robots know n or 1Z. Robots may start at arbitrary positions, in 
particular, it is possible to have multiple robots located initially on the same node. Robots are 
endowed with persistent memory. They are not able to know if the adjacent edges to their current 
node are present or missing. Finally, they are able to communicate the values of their variables 
to the robots that are located on their current node. 

In this setting, three models are considered: (i) there are whiteboards on nodes, in which 
robots can read and write information; (ii) robots and whiteboards on nodes have specific initial 
states; (in) robots are allowed not to terminate. 

In this context, the authors address self-stabilizing algorithms: a self-stabilizing algorithm is 
an algorithm that tolerates transient faults (i.e., arbitrary faults such that there exists a time 
from which these faults do not occur anymore). Such algorithm must then tolerate arbitrary 
initial states of the robots and whiteboards on nodes. If an algorithm needs the robots and 
whiteboards on nodes to have specific initial states, then it is not self-stabilizing. 

In this setting, the authors prove three impossibility results. First, they show that if the 
nodes have no whiteboards then the near-gathering is impossible to solve. This result is true 
even if robots are allowed not to terminate and if robots and whiteboards on nodes start with 
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specific initial states. Then, they prove that there is no self-stabilizing algorithm solving the 
near-gathering. This is true even if the conditions (i) and {in) are allowed. Finally, they show 
that there is no algorithm solving the near-gathering where all the robots terminate. Their result 
is true even when the conditions (?') and ( ii ) hold. 

At the sight of these impossibility results, the authors provide an algorithm solving the near¬ 
gathering in a model where the conditions ( i ), ( ii ) and {in) hold. 


5.3 Motivation for a Gracefully Degrading Gathering Algorithm 

As indicated in Section 5.1, the motivation to design a gracefully degrading algorithm (intro¬ 
duced by Biely et al. [20]) is an impossibility result in some classes of dynamic graphs. 

In the literature, all the algorithms in ST (finite) graphs for the gathering problem using 
fully-synchronous robots terminate in a finite and bounded amount of time [46, 2, 49, 81]. In 
other words, the specification of the gathering problem solved in these solutions is the following 
one. 

Definition 5.2 (Gathering G). All robots terminate their execution on the same node of the 
graph in finite and bounded time. 

Di Luna et al. [122] proved that G is impossible to solve in AC rings. Therefore, to solve 
this problem in environments in which the dynamics may change with time or in environments in 
which the dynamics are not known in advance, a gracefully degrading approach is convenient. 

None of the algorithms of the state of the art solving the gathering or rendezvous problem 
in dynamic graphs (see Section 5.2) is explicitly gracefully degrading: each of these algorithms 
is analyzed only in one specific class of dynamic graphs. However, some of them are gracefully 
degrading without knowing it. Hence, in the following, we study deeper each of these algorithms, 
analyzing them in classes of dynamic graphs other than those studied by the authors. Note that 
we consider only weaker variants of the gathering problem that seem quite natural, and we focus 
only on the classes of dynamic graphs studied in this thesis (i.e., ST, BTZS, TZS, AC, and COT). 

Algorithm proposed by Yamauchi et al. [142]: Their algorithm is not gracefully degrading 
with respect to any combination of ST, BTZS, TZS, AC, and COT : it solves G in the class of 
dynamic graphs they focus on (which are graphs with a probabilistic appearance of edges), 
but in ST, BTZS, TZS, AC, and COT graphs, their algorithm does not succeed to solve 
any non-trivial weaker version of the gathering problem. Indeed, when executing their 
algorithm in ST, BTZS, TZS, AC, and COT graphs, it is possible for the two robots (that 
are supposed to meet) to be always located on different nodes. 

Algorithms proposed by Izumi et al. [110]: In the case where the initial configuration of 
the robots is periodic, their algorithms do not succeed to solve G. In particular, this is the 
case in ST graphs. When the robots do not start from such a problematic configuration, 
their algorithms are gracefully degrading with respect to ST, BTZS, TZS, AC, and COT'. 
they solve G in ST and BTZS rings, a weaker version of the gathering problem where all 
the robots have to terminate their execution in finite (but not necessarily bounded) time 
on the same node of the ring in TZS rings, and a weaker version of the gathering problem 
where the robots must end up on at most two different nodes (not necessarily adjacent) and 
where only a part of the robots may terminate their execution in AC and COT rings. More 
precisely, in AC or COT rings, the robots choose a node where the gathering must occur. 
Only the robots that succeed to reach this chosen node can terminate their execution. This 
implies that there is no guarantee concerning the number of robots that terminate their 
execution in AC and COT rings: for these classes of dynamic graphs, between none and 7 Z 
robots may terminate their execution. 
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Algorithms proposed by Di Luna et al. [122]: In the case where the initial configuration 
of the robots is periodic, their algorithms do not succeed to solve G. In particular, this 
is the case in ST graphs. However, when the initial configuration of the robots is not 
periodic, their algorithms (except the one considering robots endowed with cross detection 
and without chirality) are gracefully degrading with respect to ST and AC\ they solve G in 
ST rings, and the near-gathering with termination in AC rings. However, if we consider 
BUS, 1Z£ or COT rings, none of their algorithms succeeds to solve G or any non-trivial 
weaker version of G. Indeed, while executing their algorithms in B1Z£, 1Z£ or COT rings, 
each robot may stop its execution alone on a node. Therefore, if one or multiple classes of 
dynamic graphs among B1Z£, 1Z£ and COT graphs are considered, their algorithms are not 
gracefully degrading anymore. 

Algorithm proposed by Ooshita and Datta [128]: Their algorithm is gracefully degrading 
with respect to ST, B1Z£, 1Z£, AC, and COT : it solves G in ST and B7Z£ rings, a weaker 
version of the gathering problem where all the robots have to terminate their execution in 
finite (but not necessarily bounded) time on the same node of the ring in 7Z£ rings, and the 
near-gathering without termination in COT and AC rings. 

By the previous analysis, we can conclude that only two articles of the state of the art propose 
gracefully degrading gathering algorithms with respect to ST, B1Z£, 1Z£, AC, and COT. 

In distributed computing, specifications are often described thanks to a safety and a liveness 
property. Intuitively, according to Lamport [117] “a safety property is one which states that 
something will not happen” and “a liveness property is one which states that something must 
happen”. 

The safety and liveness of G are defined as follows: 

Safety: All robots that terminate do so on the same node. 

Liveness: Every robot terminates in finite and bounded time. 

The underlying idea of indulgent approaches [5, 118] is to preserve the safety of the problem 
even when the environment becomes harsher in order to preserve the essence of the problem. 

We think that gracefully degrading algorithms should also follow this idea, and hence preserve 
the safety of the problem even when the environment becomes highly dynamic. 

Note that, even if the algorithms of Di Luna et al. [122] are gracefully degrading with respect 
to ST and AC graphs, the version of the gathering problem solved in AC rings does not preserve 
the safety of the gathering problem (since the robots may terminate their execution on two dif¬ 
ferent nodes). Moreover, even if the algorithm of Ooshita and Datta [128] is gracefully degrading 
with respect to ST, B7Z£, 1Z£, AC, and COT, it preserves the safety of the gathering problem 
only in a trivial way: there is no termination of the robots in AC and COT rings. Similarly, the 
algorithms of Izumi et al. [110] are gracefully degrading with respect to ST, B1Z£, 1Z£, AC, and 
COT, but there is no guarantee on the number of robots that must terminate their execution in 
AC and COT rings. In particular, it is possible for none of the robots to terminate their execu¬ 
tion in AC and COT rings, and therefore, in this case, the safety of the gathering problem is only 
preserved trivially. 

Therefore, there is no algorithm in the state of the art solving the gathering problem in a 
gracefully degrading manner with respect to ST, B1Z£, 1Z£, AC, and COT, considering weaker 
versions of the gathering problem that only weaken the liveness of this problem, and that guar¬ 
antee that a certain number of robots must terminate their execution. 

To fill the lack of the state of the art, we decide to conceive such an algorithm. We define 
specifications close to G that keep unchanged the safety property of G, that weaken only its 
liveness and that impose that a certain number of the robots will terminate their execution. The 
liveness is weakened such that at most one robot may not terminate or (not exclusively) all robots 
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that terminate do so eventually (and not in a bounded time as in G), giving us the three following 
specifications. 

Definition 5.3 (Eventual gathering G e)- All robots terminate their execution on the same node 
of the graph in finite time. 

Note that the impossibility result of Di Luna et al. [122] is also true for G e (since G^; is 
weaker than G): G^; is impossible in AC rings. 

Definition 5.4 (Weak gathering Gw)- All robots but (at most) one terminate their execution on 
the same node of the graph in finite and bounded time. 

Definition 5.5 (Eventual weak gathering G ew)- All robots but (at most) one terminate their 
execution on the same node of the graph in finite time. 

As indicated, G e, G w and G ew are weaker than G. Moreover G ew is weaker than Ge and 
than Gw- However, G^; and Gw are not comparable. Indeed, in an execution where G^; is 
satisfied, it is possible to have all the robots that terminate their execution in a finite time that 
is arbitrarily long. Therefore, such execution does not satisfy Gw- Similarly, in an execution 
where Gw is satisfied, it is possible to have all robots but one that terminate their execution in 
finite and bounded time, and to have one robot that never terminates its execution. Hence, such 
execution does not satisfy G e- 
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The gathering problem is impossible in AC rings [122]. This impossibility motivates the con¬ 
ception of a gracefully degrading gathering algorithm in dynamic rings (refer to Section 5.1). The 
conception of a gracefully degrading gathering algorithm implies to define at least one approached 
specification related to the gathering problem. We defined, in Section 5.3, three specifications re¬ 
lated to G: G e, G w and G ew (refer to Section 5.3 for the definitions of these specifications). 
These three related specifications preserve the safety of G and guarantee that at least 1Z — 1 
robots of the system terminate (eventually or in bounded time depending on the variants) their 
execution on the same node of the ring. In this chapter, based on these four specifications of the 
gathering problem (G, G^, G w and G ew)i we present a gracefully degrading gathering algorithm 
with respect to ST, B1Z£, 1Z£, AC, and COT. Our algorithm solves G in B1Z£ and ST rings, 
Gij in 1Z£ rings, Gw in AC rings and G ew in COT rings. It is the first gracefully degrading 
algorithm applied to robot networks. Since it is only possible to know the class to which belongs 
a dynamic graph in a post mortem way, one of the difficulties of such algorithm is to succeed to 
solve the correct version of the gathering problem without being able to detect the nature of the 
dynamics of the graph in which it is executed. Among the classes of dynamic rings considered 
some may possess one eventual missing edge while some others do not, which adds difficulty in 
the way to deal with the gathering problem while considering the different kinds of classes of 
dynamic graphs. To solve the gathering problem, since the nodes of the rings are anonymous, our 
algorithm consists in electing one robot (thanks to its identifier) and then make the other robots 
join this elected robot. Because of the presence of at most one eventual missing edge, it may be 
impossible to make the 1Z — 1 robots of the system join the elected robot. 

The results presented in this chapter have been published in SSS 2018 [31]. 

Results. In this chapter, we give a gracefully degrading gathering algorithm for dynamic rings. 
This algorithm is motivated by a set of impossibility results that we present in Section 6.1 (see 
also Table 6.1 for a summary of these impossibility results). We then present, in Section 6.2, 
our gracefully degrading gathering algorithm, and in Section 6.3 its proof of correctness. Note 
that, for each class of dynamic rings we consider, our algorithm solves the strongest possible of 
our variants of the gathering problem (refer to Table 6.1). Hence, our algorithm satisfies more 
properties than the one required by the definition of a gracefully degrading algorithm: we will 
detail this in the midterm perspectives described in Chapter 7. Finally, Section 6.4 concludes the 
chapter. 
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G 

G e 

Grv 

G EW 

COT 

Impossible (Cor. 6.2, 6.3) 

Impossible (Cor. 6.1) 

Impossible (Cor. 6.3) 

Possible (Th. 6.2) 

AC 

Impossible (Cor. 6.2) 

Impossible (Th. 6.1) 

Possible (Th. 6.4) 

— 

ns 

Impossible (Cor. 6.3) 

Possible (Th. 6.3) 

Impossible (Cor. 6.3) 

— 

BUS 

Possible (Th. 6.5) 

— 

— 

— 

ST 

Possible (Cor. 6.6) 

— 

— 

— 


Table 6.1: Summary of our results. The symbol — means that a stronger variant of the problem 
is already proved solvable under the dynamics assumption. Our algorithm is gracefully degrading 
since it solves each variant of the gathering problem as soon as dynamics assumptions allow it. 


In this chapter, we consider a system of 1Z > 4 robots. In addition to the common assumptions 
made on robots all along the chapters of this thesis (see Section 3.2), each robot knows the size n 
of the ring and 1Z. Each robot r possesses a distinct (positive) integer identifier id r . Initially, a 
robot only knows the value of its own identifier. The robots are able to communicate (by direct 
reading) the values of their variables to each other only when they are involved in the same tower. 
They are endowed with strong local multiplicity detection. Finally, all the robots have the same 
chirality. Call this model Mgathering (also refer to Figure 3.5). These assumptions are needed for 
our algorithm but their necessity is left as an open question here. Thanks to all these assumptions, 
our algorithm succeeds to handle any arbitrary initial positions of the robots. In particular some 
robots may start their execution from the same node. For the algorithm presented in this chapter, 
the variable dir may take the value right , left or _L. 

Note that, even if we present a gracefully degrading gathering algorithm (gathering whose 
specification adapts itself to the dynamics of the graphs), the robots have no means to detect the 
dynamics of the graph. 

6.1 Impossibility Results 

In this section, we present the set of impossibility results summarized in Table 6.1. These 
results show that some variants of the gathering problem cannot be solved depending on the 
dynamics of the ring in which the robots evolve and hence motivate our gracefully degrading 
approach. 

First, we prove in Theorem 6.1 that G^; (the eventual variant of the gathering problem) is 
impossible to solve in AC rings. Note that Di Luna et al. [122] provide a similar result but 
show it in an informal way only. Moreover, our result subsumes theirs since the considered 
models are different: we show that the result remains valid even if robots are identified, able 
to communicate, and not necessarily initially all scattered (other different assumptions exist 
between the two models but have no influence on our proof). 

The proof of Theorem 6.1 relies on the generic framework introduced by Braud-Santoni et 
al. [34] (see Section 4.2 for more information about this framework). 

Theorem 6.1. There exists no deterministic algorithm under JCigathering that satisfies Ge in 
AC rings of size 4 or more using 4 robots or more. 

Proof. By contradiction, assume that there exists a deterministic algorithm A that satisfies Ge in 
any AC ring of size 4 or more using 4 robots or more. Let us choose arbitrarily two of these robots 
and denote them ri and r 2 ■ 

Note that A may allow the last robot to terminate only if it is co-located with all other 
robots (otherwise, we obtain a contradiction with the safety of G^;). So, proving the existence 
of an execution of A in an AC ring where r\ and r 2 are never co-located is sufficient to obtain 
a contradiction with the liveness property of Ge and to show the result. This is the goal of the 
remainder of the proof. 
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Figure 6 . 1 : Construction of Gi+i from Gi- 


Let Q = {Go, Gi,...} be an AC graph whose footprint G is a ring of size 4 or more such that 
Vi £ N, Gj = G. Consider two nodes u and v of G, such that the node v is the adjacent node of u 
in G to the clockwise. We denote by e uv the edge linking the nodes u and v. Let Q' be G\{e uv , N}. 
Note that G' £ AC. Let e be the execution of A in Q' starting from the configuration where n 
is located on node u and r 2 is located on node v. Note that the distance in the footprint of G 
between n and ri (denoted d[r\, T 2 )) is equal to one. 

Our goal is to construct a sequence of AC rings denoted (G m )me N such that Go = G' and, for 
any i > 0 , r\ and r 2 are never co-located before time t{ in e* (the execution of A in Gi starting from 
the same configuration as e), (i m ) me N being a strictly increasing sequence with to = 0. First, we 
show in the next paragraph that, if some such Gi exists and, moreover, ensures the existence of a 
time t[ + 1 > ti where the two robots are still on different nodes in £{, then we can construct Gi+i 
as shown in Figure 6.1. We then prove that our construction guarantees the existence of such a 
t[, implying the well definition of (G m )m£N- 

As ri and ?’2 are not co-located at time ti in £ t , at least one of them must move in finite time 
in any execution starting from 7 ^ (otherwise, we obtain a contradiction with the liveness of Ge)- 
Let t'j > tj. be the smallest such time in the execution where the topology of the graph does not 
evolve from time L to time t\. In the following, we show how we construct the evolving graph 
Gi- 1 - 1 , in function of t\ and Gi • As we assume that in Gi, at time f(+ 1 , n and r 2 are on two different 
nodes, i.e., d{r\, r© > 1 , the following cases are possible. 

Case 1: d{r\,r 2 ) = 1 at time t\ + 1. 

Let e be the edge between the respective locations of r\ and r 2 at time t\ + 1. We define 
Gi+ 1 on the same footprint as Gi by Gi+i = Gi ®t'. (^\{e, {t[ + 1,..., + 00 }}). 

Case 2: d{r\,r 2 ) = 2 at time t[ + 1. 
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We define first Q[ on the same footprint as Q % by Q\ = Qi Q. Note that Q[ is an AC ring 
by assumption on Qi and since Q is the static ring. Then, to avoid a contradiction with the 
liveness of G e, we know that there exists a time oti > t\ + 1 in the execution of A in Q[ 
where at least one of our two robots moves ( w.l.o.g. assume that on is the smallest one). If, 
at time a* + 1 , the two robots are on distinct nodes in Q[, then we define Qi+i on the same 
footprint as Q t by Qi+i = Qi <g> t / Q. If, at time a t + 1 , the two robots are on the same node 
in Q [, then we denote e and e! the two consecutive edges between the respective locations 
of n and T 2 that are crossed during the Move phase of time a*, and we define Qi+\ on the 
same footprint as Qi by Q- l+ \ = Qi (<5\{e, {t'i + 1, • • •, +oo}}). 

Case 3: d(r±, r 2 ) > 2 at time t[ + 1. 

We define Qi+\ on the same footprint as Q % by Qi+i = Qi (gy Q■ 

Note that Qi and Qi + \ are indistinguishable for robots until time t\. This implies that, at time 
^ + 1, n and ?’2 are on the same nodes in and in £i+i- By construction of f(, either n or ?’2 
or both of the two robots move at time t\ in Moreover, by construction of Qi, even if one or 
both of the robots move during the Move phase of time t[, at time t! i +1 the robots are still on two 
distinct nodes (since, in all cases above, either the distance between the robots before the move is 
strictly greater than 2 , an edge between the two robots is missing before the move and prevents 
the meeting, or the two robots move in a way that prevents the meeting by indistinguishability 
between Qi and Qi+i). Note that, by construction, Qi+\ has at most one edge missing at each 
instant time and hence is an AC ring. 

Defining ti + \ = t\ + 1, we succeed to construct Qi+\ with the desired properties. Note that t\ 
and Qo trivially satisfy all our assumptions. In other words, (£/ m )meN is well-defined. 

We can then define the evolving graph Q u such that Q u and Qq have the same footprint, and 
such that for all i £ N, Q w shares a common prefix with Qi until time t[. As the sequence (t m )meN 
is increasing by construction, this implies that the sequence (Q m )meN converges to Q w . Applying 
the theorem of Braud-Santoni et al. [34], we obtain that, until time t\, the execution of A in Q u is 
identical to the one in Qi. This implies that, executing A in Q w (whose footprint is a ring of size 
4 or more), r\ and V 2 are always on distinct nodes, contradicting the liveness of G^; and proving 
the result. □ 

It is possible to derive some other impossibility results from Theorem 6.1. Indeed, by Corol¬ 
lary 4.1, the inclusion AC C COT allows us to state that G^ is impossible to satisfy under 
M gathering in COT rings as well. 

Corollary 6.1. There exists no deterministic algorithm under Ai gathering that satisfies Ge in 
COT rings of size 4 or more using 4 robots or more. 

From the very definitions of G and G^;, it is straightforward to see that the impossibility of 
Ge under a given class of dynamic rings implies the one of G under the same class of dynamic 
rings (refer to Section 4.1). 

Corollary 6.2. There exists no deterministic algorithm under M. gat h e ring that satisfies G in 
COT or AC rings of size 4 or more using 4 robots or more. 

Finally, impossibility results for bounded variants of the gathering problem (i.e., the impossi¬ 
bility of G in 1Z8 rings and of Gw i n COT and 1Z8 rings) are obtained as follows. The definition 
of COT and 1ZS does not exclude the ability for all edges of the graph to be missing initially 
and for any arbitrary long time, hence preventing the gathering of robots for any arbitrary long 
time if they are initially scattered. This observation is sufficient to prove a contradiction with the 
existence of an algorithm solving G or Gw in these classes of dynamic rings. 

Corollary 6.3. There exists no deterministic algorithm under A4 ga thering that satisfies G or 
Gw i n COT or 1Z8 rings of size 4 or more using 4 robots or more. 
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6.2 Gracefully Degrading Gathering: Algorithm GKDG 

This section presents GDG, our gracefully degrading gathering algorithm, that aims to solve 
different variants of the gathering problem under various dynamics (refer to Table 6.1). 

In Subsection 6.2.1, we informally describe our algorithm clarifying which variant of gathering 
is satisfied within which class of evolving graphs. Next, Subsection 6.2.2 presents formally the 
algorithm. 

6.2.1 Overwiew 

Our algorithm has to overcome various difficulties. First, robots are evolving in an environ¬ 
ment in which no node can be distinguished. So, the trivial algorithm in which the robots meet 
on a particular node is impossible. Moreover, since the footprint of the graph is a ring, (at most) 
one of the n edges may be an eventual missing edge. Indeed, in the strongest class of dynamic 
rings considered ( COT rings), at most one edge may be an eventual missing edge: if there were 
more than one eventual missing edge, then the eventual underlying graph of the dynamic ring 
would possess at least two distinct connected components and it would not be possible for a node 
to reach over time any other node infinitely often (which is the property that COT graphs should 
respect). No robot is able to distinguish an eventual missing edge from a missing edge that will 
appear later in the execution. In particular, a robot stuck by a missing edge does not know 
whether it can wait for the missing edge to appear again or not. Finally, despite the fact that no 
robot is aware of which class of dynamic graphs robots are evolving in, the algorithm is required 
to meet at least the specification of the gathering according to the class of dynamic graphs in 
which it is executed or a better specification than this one. 

The overall scheme of the algorithm consists in first detecting r m , n , the robot having the 
minimum identifier so that the 7 Z robots eventually gather on its node (i.e., satisfying specifi¬ 
cation G e)- Of course, depending on the particular evolving graph in which our algorithm is 
executed, G^; may not achieve. In the strongest class of evolving graphs considered in this chap¬ 
ter (class COT ) and the “worst” possible evolving graph, one can expect specification G ew only, 
i.e., at least TZ — 1 robots gathered. 

The algorithm proceeds in four successive phases: M (for “am I the Min?”), K (for “min wait 
to be Known”), W (for “Walk”), and T (for “wait Termination”). Actually, again depending on 
the class of graphs and the evolving graph in which our algorithm is executed, we will see that 
the four phases are not necessarily all executed since the execution can be stopped prematurely, 
especially in case where G e (or G) is achieved. By contrast, they can also never be completed in 
some strong classes of dynamic graphs where the connectivity assumptions are weak (namely AC 
or COT graphs), solving G ew (or Gpv) only. 

We present below the intuition of each of these four phases in the order. 

Phase M. This phase leads each robot to know whether it possesses the minimum identifier. 
Initially every robot r points to the right direction. Then r moves to the right until it moves 
4 *n* id r steps on the right (where id r is the identifier of r, and n is the size of the ring) or until it 
meets 1Z — 2 other robots such that its identifier is not the smaller one among these robots or until 
it meets a robot that knows the identifier of r m j n . The first robot that succeeds to move 4 *n* id r 
steps in the right direction is necessarily r m i n . Depending on the class of graph, one eventual 
missing edge may exist, preventing ?’ m in to move on the right direction during 4 *n* id rmin steps. 

However, in the case where there is an eventual missing edge at least TZ — 1 robots succeed 
to be located on a same node. They are located either on the extremity of the eventual missing 
edge or on the extremity of a missing edge that is not eventually missing. The robot r m i n is not 
necessarily located with these TZ—1 gathered robots. Note that the weak form of gathering (G ew) 
could be solved in that case. However, the TZ—1 robots gathered cannot stop their execution. 
Indeed, our algorithm aims at gathering the robots on the node occupied by r m i n . However, r m i n 
may not be part of the TZ—1 robots that gathered. Further, it is possible for TZ — 1 robots to 
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Algorithm 6.1 Predicates used in GDG 

MinDiscovery() = 

(kindr = potentialMin A 3 r 1 £ NodeAtateQ, (kind r i = righter A id r < id r Q)T 
3r' £ NodeMateQ, idMin r ' = »d r V 

3r' £ N odeM ateQ, (kind r > £ {dumb Searcher, potential Min} A id r < idPotentialMin r ')\/ 
rightStepSr = 4 * id r * n 
GE() = 

\NodeMateQ\ = 1Z — 1 

GEW() = 

\NodeAlateQ\ = lZ — 2/\3r' £ {r}U NodeAtateQ, kind r > £ {minW aitingW alker, minTailW alker} 

HeadWalkerWithoutWalkerMateQ = 

kindr = headWalker A ExistsEdge(left, previous) A ->HasMovedQ A NodeMateldsQ ^ walkerMate r 

LeftWalker() = 

kind r = leftW alker 
HeadOrTailWalkerEndDiscovery() = 

kindr £ {headWalker, tailWalker, minTailWalker} A walkSteps r = n 

HeadOrTailWalker() = 

kindr £ {headWalker, tailW alker, minTailW alker} 

AllButTwoWaitingWalker() = 

\NodeMateQ\ = TZ — 3 A Vr' £ {r} U NodeMateQ, kind r ' £ {waitingWalker, minWaitingWalker} 

WaitingWalker() = 

kindr £ {waitingW alker, minW aitingW alker} 

PotentialMinOrSearcherWithMinWaiting(r’) = 

kindr £ {potential At in, dumb Searcher, aw are Searcher} A kind r i = minW aitingW alker 

RighterWithMinWaiting(r’) = 

kindr = righter A kindp = minW aitingWalker 

NotWalkerWithHeadWalker(r’) = 

kindr £ {righter, potentialhlin, dumbSearcher, aw are Searcher} A kind r ' = headW alker 

NotWalkerWithTailWalker(r’) = 

kindr £ {righter, potential M in, dumbSearcher, aw are Searcher} A kind r > = minTailW alker 

PotentialMinWithAwareSearcher(r’) = 

kindr = potential Min A kind r ' = awareSearcher 

AllButOneRighter() = 

| NodeMateQ\ = 1Z — 2 A Vr' £ {r} U NodeMateQ, kind r ' = righter 

RighterWithSearcher(r’) = 

kindr = righter A kind r ' £ {dumbSearcher, awareSearcher} 

PotentialMinOrRighter() = 

kindr £ {potential At in, righter} 

DumbSearcherMinRevelation() = 

kindr = dumbSearcher A 3r' £ NodeMateQ, Qkind r ' = righter A id r > > idPotentialAtin r ) 

DumbSearcherWithAwareSearcher(r’) = 

kindr = dumbSearcher A kind r / = awareSearcher 

Searcher() = 

kindr £ {dumbSearcher, awareSearcher} 


gather (without r m i n ) even when r m) ; n succeeds in moving 4 *n*id rmin steps to the right (i.e., even 
when r m i n stops to move because it completed Phase M). In that case, if the 1Z — 1 robots that 
gathered stop their execution, Ge cannot be solved in 1Z£, B1ZS and ST rings, as ODG should 
do. Note that, it is also possible for r m i n to be part of the 1Z — 1 robots that gathered. 

Recall that robots can communicate when they are both located in the same node. So, the 
TZ—1 robots may be aware of the identifier of the robot with the minimum identifier among them. 
Since it can or cannot be the actual r m i n , let us call this robot potential Alin. Then, driven by 
potential Min, a search phase starts during which the TZ — 1 robots try to visit all the nodes of 
the ring infinitely often in both directions by subtle round trips. Doing so, r m i n eventually knows 
that it possesses the actual minimum identifier. 

Phase K. The goal of the second phase consists in spreading the identifier of r m i n among the 
other robots. The basic idea is that during this phase, r m i n stops moving and waits until TZ — 3 
other robots join it on its node so that its identifier is known by at least TZ — 3 other robots. 
The obvious question arises : u Why waiting for TZ — 3 extra robots only?' 1 A basic idea to gather 
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could be that once r m j n is aware that it possesses the minimum identifier, it can just stop to 
move and just wait for the other robots to eventually reach its location, just by moving toward 
the right direction. Actually, depending on the particular evolving graph considered one missing 
edge e may eventually appear, preventing robots from reaching r m i n by moving toward the same 
direction only. That is why the gathering of the TZ — 2 robots is eventually achieved by the 
same search phase as in Phase M (since the search phase permits to at least 3 robots to explore 
infinitely often the nodes of the ring until reaching a given node). However, by doing this, it is 
possible to have 2 robots stuck on each extremity of e. Further, these two robots cannot change 
the directions they point to since a robot is not able to distinguish an eventual missing edge from 
a missing edge that will appear again later. This is why during Phase K, r m i n stops to move until 
1Z — 3 other robots join it to form a tower of TZ — 2 robots. In this way, these TZ — 2 robots start 
the third phase simultaneously. 

Phase W. The third phase is a walk made by the tower of TZ — 2 robots. The TZ — 2 robots are split 
into two distinct groups, Head and Tail. Head is the unique robot with the maximum identifier of 
the tower. Tail, composed of 7?. — 3 robots, is made of the other robots of the tower, led by r m i n . 
Both move alternatively in the right direction during n steps such that between two movements 
of a given group the two groups are again located on a same node. This movement permits to 
prevent the two robots that do not belong to any of these two groups to be both stuck on different 
extremities of an eventual missing edge (if any) once this walk is finished. Since there exists at 
most one eventual missing edge, we are sure that if the robots that have executed the walk stop 
moving forever, then at least one robot can join them during the next and last phase. 

As noted, it can exist an eventual missing edge, therefore, Head and Tail may not complete 
Phase W. Indeed, one of the two situations below may occur: (i) Head and Tail together form 
a tower of TZ — 2 robots but an eventual missing edge on their right prevents them to complete 
Phase W; (ii) Head and Tail are located on neighboring nodes and the edge between them is an 
eventual missing edge that prevents Head and Tail to continue to move alternatively. 

Call u the node where Tail is stuck on an eventual missing edge. In the two situations de¬ 
scribed even if Phase W is not complete by both Head and Tail, either G e or G ew is solved. 
Indeed, in the first situation, necessarily at least one robot r succeeds to join u. In fact, either r 
points to the good direction to reach u or it meets a robot on the other extremity of the eventual 
missing edge that makes it change its direction, and hence makes it point to the good direction to 
reach u. In the second situation, necessarily at least two robots r and r' succeed to join u. This 
is done either because r and r' point to the good direction to reach u or because they reach the 
node where Head is located without Tail making them change their direction, and hence making 
them point to the good direction to reach u. 

Once a tower of 7?. — 1 robots including r m i n is formed, G ew is solved. Then, the latter robot 
tries to reach the tower to eventually solve G^; in favorable cases. 

Phase T. The last phase starts once the robots of Head have completed Phase W. If it exists a 
time at which the robots of Tail complete Phase W, then Head and Tail form a tower of TZ — 2 
robots and stop moving. As explained in the previous phase, Phase W ensures that at least one 
extra robot eventually joins the node where Head and Tail are located to form a tower of TZ — 1 
robots. Once a tower of TZ — 1 robots including r m i n is formed, G ew is solved. Then, the latter 
robot tries to reach the tower to eventually solve Ge in favorable cases. In the case the robots of 
Tail never complete the phase W, then this implies that Head and Tail are located on neighboring 
nodes and that the edge between them is an eventual missing edge. As described in Phase W either 
G ew or G^ is solved. 

6.2.2 Algorithm 

Before presenting formally our algorithm, we first describe the set of variables of each robot. 
Similarly as for the variables declared in Section 3.2, when necessary, we index the variables with 
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Algorithm 6.2 Functions used in GDG 

Function StopMoving() 

dir r := _L 


Function MoveLeft() 

dir r := left 

Function BecomeLeftWalker() 

( kindr, dir r ) := ( leftWalker , _L) 

Function Walk() 

{ _L if ( id r = idHeadWalker r A walkerMate r ^ N odeM atel dsQ)\/ 

( id r idH eadWalker r A idH eadWalker r € NodeMateIds ()) 
right otherwise 

walkStepSr := walkSteps r + 1 if dir r = right A ExistsEdge(right, current) 
Function InitiateWalk() 

idH eadW alker r := MAx({id r } U NodeMateldsQ) 
walkerMate r ■= NodeMateldsQ 

{ headW alker if id r = idH eadW alker r 

minTailW alker if kind r = minW aitingW alker 
tailW alker otherwise 


Function BecomeWA iTiNGWALKER(r’) 

(kindr, idPotentialMin r , idMin r , dir r ) := (waitingWalker, id r >, id r ', _L) 
Function BecomeMinWaitingWalkerQ 

(kindr, idPotentialMin r ,idMin r , dir r ) := (minW aitingW alker, id r , id r , -L) 


Function BECOMEAwARESEARCHER(r’) 

(kindr, dir r ) '■= (awareSearcher, right) 

(idPotentialMin r ', idPotentialMin r 


(idPotentialMin r ,idMin r ) := 


(idMin r ', idMin r 


if kind r i = dumbSearcher 
otherwise 


Function BECOMETAlLWALKER(r’) 

(kindr, idPotentialMinr, idMin r ) := (tailWalker, idPotentialMinr', idMin r ') 

(idH eadW alker r , walker Mate r , walkSteps r ) := (idH eadW alker r >, walker Mate r ' ,walkSteps r Q 


Function MoveRight() 

dir r '■= right 

rightStepSr := rightSteps r + 1 if ExistsEdge(dir, current) 


Function InitiateSearch() 

idPotentialMinr := MiN({id r } U NodeMateldsQ) 

potentialMin if id r = idPotentialMinr 
dumbSearcher otherwise 

rightSteps r := rightSteps r + 1 if kind r = potentialMin A ExistsEdge(dir, current) 


kind r : = 


Function Search() 

{ left if \NodeMate()\ > 1 A id r = MAx({id r } U NodeMateldsQ) 

right if \NodeMate()\ > 1 A id r MAX^ic^} U NodeMateldsQ) 
dir r otherwise 


the name of the robot to clarify to which robot the variable belongs to. We recall that each robot 
knows 7 Z, n and its own identifier id (strictly greater than 0 ) as constants. 

In addition to the variable dir r (initialized to right), each robot r possesses seven variables 
described below. Variable kind r allows the robot r to know which phase of the algorithm it is per¬ 
forming and (partially) indicates which movement the robot has to execute. The possible values 
for this variable are righter, dumbSearcher, aw are Searcher, potentialMin, waitingW alker, 
minW aitingW alker, headW alker, tailW alker, minTailWalker and leftWalker. Initially, the 
variable kind r is equal to righter. Initialized with 0, rightSteps r counts the number of steps 
done by r in the right direction when kind r £ {righter, potentialMin}. The next variable is 
idPotentialMin r . Initially equals to —1, the variable idPotentialMin r contains the identifier of 
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Algorithm 6.3 GDG 

Rules for Termination 

Ternii :: Gb() —> terminate 
Terni 2 :: G ewQ —> terminate 

Rules for Phase T 

Ti :: LeftW alker( ) —MoveLeft() 

T 2 :: HeadWalkerWithoutWalkerMateQ —» BecomeLeftWalker() 

T 3 :: HeadOrTailWalkerEndDiscoveryQ —> StopMoving() 

Rules for Phase W 

Wi :: HeadOrTailWalkerQ —> Walk() 

Rules for Phase K 

Ki :: AllButTwoWaitingWalkerQ —» InitiateWalk() 

K 2 :: WaitingWalkerQ —> StopMoving() 

K 3 :: 3r' £ NodeMateQ,PotentialMinOrSearcherWithMinWaitingQr') 

-> BECOMEWAITINGWALKER(r’) 

K 4 :: 3r' £ NodeMateQ, RighterWithMinWaiting(r') A ExistsEdgeQright, current) 
-> BECOMEAwARESEARCHER(r’) 


Rules for Phase M 

Mi :: PotentialMinOrRighterQ A MinDiscovery () — > BECOMEMlNWAlTlNGWALKER(r) 

M 2 :: 3 r' £ NodeMateQ, NotWalkerWithHeadWalker{r') A ExistsEdgeQright, current) 

-BECOMEAwARESEARCHER(r’) 

M 3 :: 3 r' £ NodeMateQ, NotWalkerWithHeadWdlkerQr') 

-> BECOMEAwARESEARCHER(r’); StOpMOVINGQ 

M 4 :: 3 r' £ NodeMateQ, NotWalkerWithTailW alker(r') — > BECOMETAlLWALKER(r’); Walk() 
M 5 :: 3r' £ NodeMateQ, PotentialMinWithAwareSearcher(r') 

-BECOMEAwARESEARCHER(r’); SEARCH() 

Mg :: AllButOneRighterQ — InitiateSearch() 

M 7 :: 3r' £ NodeMateQ, RighterWithSearcher(r') —> BecomeA wARESEARCHER(r’); SearchQ 
Ms :: Potential MinOr RighterQ —» MoveRight() 

Mg :: DumbSearcherAdinRevelationQ — t BecomeA wARESEARCHER(r); Search() 

M 10 :: 3 r' £ NodeMateQ, DumbSearcherWithAwareSearcherfr') 

-> BECOMEAwARESEARCHER(r’); SEARCH0 

Mn :: SearcherQ — > Search() 


the robot that possibly possesses the minimum identifier (a positive integer) of the system. This 
variable is especially set when TZ — 1 Tighter are located on a same node. In this case, the variable 
idPotentialMin r of each robot r that is involved in the tower of 1Z — 1 robots is set to the value of 
the minimum identifier possessed by these robots. The variable idMin r of a robot indicates the 
identifier of the robot that possesses the actual minimum identifier among all the robots of the 
system. This variable is initially set to —1. Let the variable walkerMate r of a robot be the set 
of all the identifiers of the 1Z — 2 robots that initiate the Phase W. Initially this variable is set to 
0. The counter walkSteps r , initially 0, maintains the number of steps done in the right direction 
while r performs the Phase W. Finally, the variable idHeadWalker r contains the identifier of the 
robot that plays the part of Head during the Phase W. 

Moreover, we assume the existence of a specific instruction: terminate. By executing this 
instruction, a robot stops executing the L-C-M cycles forever. 

To ease the writing of our algorithm, we define a set of predicates (presented in Algorithm 6.1) 
and functions (presented in Algorithm 6.2), that are used in our gracefully degrading algorithm 
GDG (refer to Algorithm 6.3). 


6.3 Proofs of correctness of GKDG 

In this section, we first prove, in Section 6.3.1, that GDG solves G ew i n COT rings. Then, in 
Section 6.3.2, we consider AC, TZS, BTZS and ST rings and for each of these classes of dynamic 
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rings, we give the problem GDG solves in it. 

We want to prove that, while executing GDG, at least 1Z — 1 robots terminate their execution 
on the same node. Therefore, in the proof of correctness, we show that our algorithm forces 
the robots to execute either Rule Termi or Rule Term 2 whatever the harsh situation. More 
precisely, the logic of our proof of correctness is based on a proof by contradiction: in each proof, 
we make the assumption that Rules Termi and Term 2 are not executed and then finally we prove 
that our algorithm succeeds to execute at least one of these rules. Note that this assumption is 
made overall the proof of correctness and hence we will not indicate it at the beginning of each 
proof. 

In the following, for ease of reading, we abuse the various values of the variable kind to 
qualify the robots. For instance, if the current value of variable kind of a robot is righter, then 
we say that the robot is a righter robot. Let us call min a robot such that its variable kind 
is equal either to minWaitingWalker or to minTailWalker. Moreover, in some proofs, we 
indicate the functions called by the robots. When these functions take a parameter and the value 
of this parameter does not matter for the proof, we simply symbolize it by the character 
For instance, if a robot calls the function BecomeAwareSearcher, we write that it calls the 
function BecomeAwareSearcher(_). 

6.3.1 GDG solves G ew in COT rings 

In this section, we prove that GDG solves G ew i n COT rings. Since GDG is divided into four 
phases, we prove each of these phases hereafter. 

Correctness Proof of Phase M 

We recall that the goal of Phase M of our algorithm is to make the robot with the minimum 
identifier aware that it possesses the minimum identifier among all the robots of the system. In 
our algorithm a robot is aware that it possesses the minimum identifier when it is min. Therefore, 
in this section we have to prove that only r m i n can become min, and that r m j n effectively becomes 
min in finite time. We prove this respectively in Lemmas 6.3 and 6.5. 

First we give two observations that help us all along the proves of each phase. 

Observation 6.1. By the rules of GDG, a robot whose variable kind is not either righter or 
potentialMin cannot become a righter or a potential Min. 

Observation 6.2. By the rules of GDG, a robot whose variable kind is not righter cannot 
become a righter robot. 

While executing GDG, once a robot knows that it possesses the minimum identifier, it re¬ 
members this information. In other words, once a robot becomes min it stays min during the 
rest of the execution. We prove this statement in the following lemma. 

Lemma 6.1. min is a closed state under GDG. 

Proof. A robot is a min when its variable kind is either equal to minWaitingWalker or to min- 
TailWalker. A minTailWalker robot can only execute the rules T 3 and Wi that do not update 
the variable kind. A minW aitingW alker robot can only execute the rules Ki and K 2 that 
respectively makes it become a minTailW alker and does not change its state. □ 

In the following lemma, we prove that righter and potentialMin are robots that always point 
to the right direction. This lemma helps us to prove the correctness of Phase M, as well as the 
correctness of Phase K. 

Lemma 6.2. If, at a time t, a robot is a righter or a potentialMin, then it points to the right 
direction from the beginning of the execution until the Look phase of time t. 
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Proof. Robots that are Tighter robots in a configuration 7 j at time i and that are still righter in 
the configuration 7 *+i, point to the right direction during the move Phase of time i (Rule Ms). 
Moreover, by Observation 6.2 and since initially all the robots are righter robots and point to 
the right, direction, if a robot is a righter during the Look phase of a time t, this implies that it 
points to the right direction from the beginning of the execution until the Look phase of time t. 

Similarly, robots that are potential Min robots in a configuration 7 * at time i and that are 
still potentialMin in the configuration 7 ^+ 1 , point to the right direction during the move Phase 
of time i (Rule Ms). The only way for a robot to become a potentialMin is to be a righter and 
to execute Rule Me- While executing Rule Me, a righter that becomes potentialMin does not 
change the direction it points to. Therefore, by Observations 6.1 and 6.2, and by the arguments 
of the first paragraph, this implies that if a robot is a potentialMin during the Look phase of a 
time t, then it points to the right direction from the beginning of the execution until the Look 
phase of time t. □ 

Now we prove one of the two main lemmas of this phase: we prove that only r m j n can be aware 
that it possesses the minimum identifier among all the robots of the system. 

Lemma 6.3. Only r m i n can become min. 

Proof. Assume that there exists a robot r 7 ^ r m i n that becomes min. Assume also that r is the 
first robot different from r nun that becomes min. By definition of r m j n , id r > id rrnin . 

A robot that is a min is a robot such that its variable kind is either equal to minWaiting- 
Walker or to minTailW alker. A robot becomes minTailWalker only if it executes Rule Ki. A 
robot can execute Rule Ki only if it is a minWaitingWalker. A robot becomes minWaiting- 
Walker only if it executes Rule Mi. Only righter robots or potentialMin robots can execute 
Rule Mi (refer to predicate PotentialMinOrRighter( )). Then by Observation 6.1, we conclude 
that each robot can execute Rule Mi at most once. (*) 

In the following, let us consider the different conditions of the predicate MinDiscovery( ) of 
Rule Mi that permits r to become min. 

Case 1: r becomes min because the condition “kind r = potentialMin A 3r' 6 Node— 
Mate(), (kind r / = righter A id r < id r /)” is true. 

The only way for a robot to have its variable kind set to potentialMin is to execute Rule 
Me- This rule is executed when TZ — 1 righter robots are on a same node. Among these 
1Z— 1 righter robots, the one with the minimum identifier sets its variable kind to potential¬ 
Min while the other robots set their variables kind to dumbSearcher. By Observation 6.1, 
a robot that becomes a dumbSearcher robot after the execution of Rule Mg can never 
become righter robot or potentialMin robot. Moreover, by Observation 6.2, a robot that 
becomes a potentialMin can never become a righter. Since TZ — 1 righter are needed to 
execute Rule Mg, this rule can be executed only once during the execution. Therefore if r 
is a potentialMin , it is necessarily the robot that possesses the minimum identifier among 
the TZ — 1 robots that execute Rule Mg. Moreover, if there exists a righter robot r' when 
r is potentialMin , this implies that r' has not executed Rule Mg. Hence if id r < id r i , 
this necessarily implies that r = r mm , therefore there is a contradiction with the fact that 
r / r m in- 

Case 2: r becomes min because the condition “3r 7 e NodeMate(), idMin r / = id r ” is 
true. 

By (*), r is not yet min at the time of its meeting with r'. A robot r' can update its variable 
idMin with the identifier (other than its) of a robot that is not min only when it executes 
Rules M 5 , M 7 , M 9 or M 10 . Among these rules only the rules M 7 (in the case a righter is 
located with a dumbSearcher ) and Mg permit a robot to update its variable idMin with 
the identifier of a robot without copying the value of the variable idMin of another robot. 
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Therefore at least one of these rules is necessarily executed at a time, since initially the 
variables idMin of the robots are equal to —1. To execute Rule M 7 (in the case a righter is 
located with a dumb Searcher) or Rule Mg, a dumbSearcher robot must be present in the 
execution. Only the execution of Rule Mg permits to have dumbSearcher robots in the 
execution. This rule is executed when TZ — 1 righter robots are on a same node. The TZ — 1 
robots that execute this rule, set their variables idPotentialMin to the identifier of the 
robot that becomes potentialMin while executing this rule. Moreover if a robot is a dumb¬ 
Searcher in a configuration 7 1 at time t and is still a dumbSearcher in the configuration 
7 t+i then it does not update its variable idPotentialMin during time t (since it executes 
Rule Mn). 

In the case Rule M 7 is executed because a righter r r is located with a dumbSearcher rd 
necessarily id Vr > idPotentialMin rd , otherwise it is not possible for r r to execute Rule 
M7, since it would have executed Rule Mi at the same round (since the predicate Min- 
Discovery() is true because ( kind Td £ {dumbSearcher, potentialMin} A id Vr < idPoten- 
tialMin rd )). Therefore if Rule M 7 is executed at round t because a righter r r is located 
with a dumbSearcher rd, this implies, by the predicate DumbSearcherMinRevelationQ 
of Rule Mg, that Rule Mg is also executed at round t. Indeed, r r executes Rule M7, 
while rd executes Rule Mg. The reverse is also true: if a dumbSearcher rd executes Rule 
Mg at round t, then necessarily a righter r r , such that id Tr > idPotentialMin rd , executes 
Rule M 7 at round t. While executing respectively these rules the two robots update their 
variables idMin with the value of the variable idPotentialMin of the dumbSearcher. By 
using the same arguments as the one used in case 1, we know that idPotentialMin is the 
identifier of r m i n . Therefore the variables idMin are either set with the identifier of r mm 
while Rules M7 and Mg are executed, or copied from another robots while Rules M5 or 
M 10 are executed. However whatever the rule executed the value of idMin is set with the 
identifier of r m i n . 

Case 3: r becomes min because the condition “3r' £ NodeMate(), (kind r / £ {dumb¬ 
Searcher, potentialMin} A id r < idPotentialMin r /)” is true. 

Only the execution of Rule Me permits to have dumbSearcher or potentialMin in the 
execution. This rule is executed when TZ — 1 righter robots are on a same node. When 
executing this rule, the 7Z — 1 robots set their variables idPotentialMin to the identifier 
of the robot that possesses the minimum identifier among them. Moreover among the 
TZ — 1 robots that execute Rule Me, one robot becomes potentialMin while the other 
become dumbSearcher. Besides if a robot is a dumbSearcher (resp. a potentialMin) in 
a configuration 74 at time t and is still a dumbSearcher (resp. a potential Mm ) in the 
configuration ~{t+i then it does not update its variable idPotentialMin during time t since 
it executes Rule Mu (resp. Mg). As Rule Me can only be executed once (see the arguments 
of case 1), if r meets a dumbSearcher or a potentialMin r', such that id r < idPotential¬ 
Minr A this necessarily implies that r' is issued of the execution of Rule Me while r has not 
executed this rule, and therefore r = r m i n , which is a contradiction. 

Case 4: r becomes min because rightSteps r = 4 * id r * n. 

At the time where r becomes min , r mm is either a righter robot, a potentialMin robot 
or min, otherwise this implies that there already exists a min (other than r min ) in the 
execution, which is a contradiction with the fact that r is the first robot different from r mm 
that becomes min. 

By the predicate PotentialMinOrRighterQ of Rule Mi, only righter robots or poten¬ 
tialMin robots can become min. By Lemma 6.2, if, at a time t, a robot is a righter or 
a potentialMin , then it points to the right direction from the beginning of the execution 
until the Look phase of time t. Robots that are righter robots or potentialMin robots in a 
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configuration 7 1 at time t. and that are either righter or potential Min in the configuration 
7 t+i increase from 1 their variables rightSteps each time an adjacent edge in the right 
direction to their positions is present (Rules Me and Ms). Therefore, by the predicate 
MinDiscoveryf) of Rule Mi a robot r” moves at most during 4 * id r ” * n steps in the right 
direction before being min. 

By Lemma 6.1, from the time a robot becomes min , it is either a minWaitingWalker or 
a minT ail Walker. Therefore it can only execute Rules Termi, Terrri 2 , Ki, K 2 , Wi and 
T 3 . This implies that once a robot is min, it only points either to the right or to the _L 
direction, and can move during at most n steps in the right direction before stopping to 
move definitively (by executing the following rules in the order: K 2 , Ki, Wi and T 3 ). 
Therefore by the previous paragraph, a min r” points to the right or the _L direction from 
the beginning of the execution until the end of the execution, and can move during at most 
4 * id r " * n + n steps in the right direction during the whole execution. 

Because of the dynamism of the ring, by Observation 6.1 and since when a righter or a 
potentialMin robot stops to be a righter or a potentialMin robot, it stops to update the 
value of its variable rightSteps, we have: Vri,r '2 G 7 Z 2 ,kind ri ,kind r2 G {righter,poten¬ 
tialMin} 2 , | rightSteps ri — rightSteps T2 | < n. 

Because it takes one round for a robot to update its variable kind to min, a righter or a po¬ 
tentialMin can be located with a robot r just the round before r becomes min. Therefore 
this righter or potentialMin can move again in the right direction during at most n steps 
without meeting the min. 

We know that id Tmin < id r , therefore we have 4 * id Tmin *n + n + n + n < 4 * id r * n. 
Hence there exists a time at which r meets r min while r m i n is min and r is not yet min. 
At this time, by the rules of GDG, r stops being a righter or a potentialMin robot, and 
hence by Observation 6.1, r cannot be anymore a righter robot or a potentialMin robot 
and therefore it cannot become min, which leads to a contradiction. 


□ 

The following lemma helps us to prove the Lemma 6.5. This lemma is true only if there is no 
min in the execution. In other words, it is true only if all the robots are executing Phase M. 

Lemma 6.4. If there is no min in the execution, if, at time t, a robot r is such that kind r G 
{dumb Searcher, aw are Searcher}, then, during the Move phase of time t — 1, it does not point 
to the _L direction. 

Proof. Consider a robot r such that, at time t, kind r G {dumb Searcher, aw are Searcher}. 

While executing GDG, since initially all the robots are righter, if there is no min, only 
righter, potentialMin, dumbSearcher and awareSearcher robots can be present in the execu¬ 
tion. 

Consider then the two following cases. 

Case 1: At time t — 1, r is neither a dumbSearcher nor an awareSearcher. 

Whatever the value of the variable kind of r at time t — 1 (righter or potentialMin ), to 
have its variable kind at time t equals either to dumbSearcher or to awareSearcher, r 
executes at time t — 1 either Rule M 5 , Me or M 7 . 

Consider first the case where r executes Rule Me at time t — 1. Only righter robots can 
execute Rule Me- While executing Rule Me, r becomes a dumbSearcher (since while ex¬ 
ecuting this rule a righter can become either a dumbSearcher or a potentialMin). More¬ 
over, while executing Rule Me, a righter that becomes dumbSearcher does not change the 
direction it points to. By Lemma 6.2, during the Look phase of time t — 1, r points to the 
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right direction and since r does not change its direction during the Compute phase of time 
t — 1 , this implies that the lemma is proved in this case. 

Consider now the case where r executes either Rule M 5 or M 7 . While executing these rules 
the function SearchQ is called. 

While executing the function SearchQ, if there are multiple robots on the current node of 
r at time t — 1, it points either to the right or to the left direction. Therefore, in this case 
the lemma is proved. 

In the case r is alone on its node at time t — 1, while executing the function SearchQ it 
does not change its direction. Moreover, while executing Rules M 5 or M 7 , before calling 
the function SearchQ the robot calls the function BecomeAwareSearcher(_) that sets 
its direction to the right direction. Therefore, in these cases, even if r is alone on its node, it 
points to a direction different from _L during the Move phase of time t — 1, hence the lemma 
is proved. 

Case 2: At time t — 1, r is a dumb Searcher or an awareSearcher. 

Whatever the value of the variable kind of r at time t — 1 (dumbSearcher or awareSear¬ 
cher), to have its variable kind at time t equals either to dumbSearcher or to awareSear¬ 
cher, r executes at time t — 1 either Rule M 9 , M 10 or Mu. While executing these rules 
the function SearchQ is called. 

As highlighted in the case 1, if there are multiple robots on the current node of r at time 
t — 1 , the lemma is proved. 

Moreover, while executing Rules M9 and Mm, before calling the function SearchQ the 
robot calls the function BecomeAwareSearcher(_) that sets its direction to the right 
direction. Therefore, in these cases, even if r is alone on its node, it points to a direction 
different from _L during the Move phase of time t — 1, hence the lemma is proved. 

It remains the case where r executes Rule Mu at time t — 1 while it is alone on its node. In 
this case, while executing Rule Mu, r does not change its direction (refer to the function 
SearchQ). Since at time t — 1, r is already a dumbSearcher or an awareSearcher , and 
since initially all the robots are Tighter , by recurrence on all the cases treated previously 
(Case 1 and 2), the direction r points to during the Move phase of time t — 1 cannot be 
equal to _L. 


□ 

Finally, we prove the other main lemma of this phase: we prove that r min is aware, in finite 
time, that it possesses the minimum identifier among all the robots of the system. 

Lemma 6.5. In finite time r m i n becomes min. 

Proof. Assume that r mtn does not become min. By Lemma 6.3, only r m i n can be min. While 
executing GDG, since initially all the robots are righter, if there is no min, only Tighter, poten- 
tialMin, dumbSearcher and awareSearcher robots can be present in the execution. 

Initially all the robots are righter. In the case where there is no min in the execution, by 
the rules of GDG, from a configuration 7 1 at a time t where there are only righter robots, it 
is not possible to have awareSearcher in the configuration 74 + 1 . A robot can become a dumb¬ 
Searcher or a potentialMin only when Rule Me is executed. This rule is executed when IZ — 1 
righter robots are on a same node (refer to predicate AllButOneRighter()). 

Let us now consider the three following cases that can occur in the execution. 

Case 1: Rule Me is never executed. 
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In this case all the robots are righter robots during the whole execution, and execute 
therefore Rule Ms at each instant time. While executing Rule Ms, a robot always points 
to the right direction and increments its variable rightSteps by one each time there exists 
an adjacent right edge to its location. Since by assumption r mtn does not become min, 
then by Rule Mi and predicate MinDiscoveryf), r m i n cannot succeed to have its variable 
rightSteps equals to 4 * id rmin * n, otherwise the lemma is true. Therefore it exists a time 
at which r nun is on a node such that its adjacent right edge is missing forever. Since it 
can exist at most one eventual missing edge in a COTring, and since all the robots always 
move in the right direction when there is an adjacent right edge to their location (since 
they execute Rule Ms), it exists a time at which 1Z — 1 righter robots are on a same node, 
cases 2 and 3 are then considered. 

Case 2: Rule Me is executed but r m i n is not among the 1Z — 1 righter robots that 
execute it. 

While executing Rule Mg, among the 711—1 righter located on a same node that execute 
this rule, the robot with the minimum identifier r p becomes potential Alin while the other 
robots become dumbSearcher , and all update their variables idPotentialMin to id rp . By 
definition we have id rp > id rmin . By Observation 6.1, a robot that becomes a dumbSear¬ 
cher can never become righter robot or potentialMin robot. Moreover, by Observation 6.2, 
a robot that becomes a potentialMin can never become a righter. Since 7^ — 1 righter are 
needed to execute Rule Mg, this rule can be executed only once. Note that if a robot 
is a dumbSearcher (resp. a potentialMin ) in a configuration at time t and is still a 
dumbSearcher (resp. a potentialMin) in the configuration ^ t +\ then it does not update its 
variable idPotentialMin during time t since it executes Rule Mu (resp. Ms) 

At the time of the execution of Rule M^, r m i n is a righter , since it is not among the robots 
that execute this rule. After the execution of this rule r m i n , as a righter , cannot meet a 
potentialMin robot. Indeed the only way for a robot to become potentialMin is to execute 
Rule Mg. Therefore only r p can be potentialMin , and we know that idPotentialMin Tp = 
id Tp > id rmin . Hence if r m i n meets a potentialMin , then by Rule Mi and predicate Min- 
Discoveryf) the lemma is true, which is a contradiction. 

Similarly, r m i n as a righter cannot meet a dumbSearcher rd■ Indeed, only Rule Mg permits 
a robot to become a dumbSearcher. Therefore, since idPotenialMin rd = id Tp > id rmin , if 
^min meets a dumbSearcher , then by Rule Mi and predicate MinDiscovery () the lemma 
is true, which is a contradiction. 

Moreover it cannot exist aw are Searcher in this execution. Indeed, as said previously, from 
a configuration 7 1 at a time t where there are only righter robots, it is not possible to 
have awareSearcher in the configuration 71 + 1 . Therefore awareSearcher can be present 
in the execution only after the execution of Rule Me- In the case where there is not yet 
awareSearcher , a robot can become an awareSearcher only if a righter meets a dumb¬ 
Searcher (Rules Mg and M 7 ). However after the execution of Rule Ms, only r m i n is a 
righter , and as explained in the previous paragraph, if r m j n as a righter meets a dumb¬ 
Searcher there is a contradiction. 

Since there is no awareSearcher and since r m i n as a righter can meet neither potential¬ 
Min nor dumbSearcher, this implies that r m j n stays a righter during the whole execution 
and therefore executes Rule Ms at each instant time. By the same arguments as the one 
used in case 1 , necessarily it exists a time at which r m j n is on node such that its adjacent 
right edge is missing forever, otherwise the lemma is true. However since there is no min 
is the execution, and there is no aiv are Searcher, r p stays a potentialMin and executes 
Rule M§ at each instant time, therefore it always points to the right direction. Since it can 
only exist one eventual missing edge and since this edge is the adjacent right edge to the 
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position of r nnn , all the other edges are infinitely often present. Therefore, in finite time, 
the potential Min is located on the same node as r m i n , which is a contradiction. 

Case 3: Rule Me is executed and r m i n is among the IZ — l righter robots that execute 
it. 

We use the same arguments as the one used in case 2. Therefore we know that while exe¬ 
cuting Rule Mg, r m i n becomes potentialMin , since r m * n possesses the minimum identifier 
among all the robots of the system. 

Moreover, since r rn i n does not become min , as a, potential Min, it cannot meet a righter robot 
otherwise by Rule Mi and predicate MinDiscovery( ) the lemma is true. 

Similarly, r mm as a, potential Alin cannot meet awareSearcher. Indeed in the case there is 
not yet awareSearcher , a robot can become an awareSearcher only if a righter meets a 
dumbSearcher (Rules Mg and M 7 ). While executing these rules a robot that becomes an 
awareSearcher sets its variable idMin to the identifier of the variable potentialMin of the 
dumbSearcher, which is in this case id rmin . An awareSearcher never updates the value 
of its variable idMin. Once there is at least one awareSearcher in the execution, it is 
possible to have other robots that become awareSearcher thanks to the execution of Rule 
Mio- However while executing this rule, a robot that becomes aw are Searcher copies the 
value of the variable idMin of the awareSearcher it is located with. Therefore if r m j n , as a 
potential Alin, meets an awareSearcher, by Rule Mi and predicate AlinDiscovery(), the 
lemma is true, which is a contradiction. 

Therefore, as a potential Alin, r m i n executes Rule Ms at each instant time. By the same 
arguments as the one used in case 1 , necessarily it exists a time at which r m i n is on node 
such that its adjacent right edge is missing forever, otherwise the lemma is true. 

By Observation 6.1, dumbSearcher and awareSearcher robots cannot become righter or 
potential Alin. As explained, if there is no meeting between a dumbSearcher robot and 
a righter robot, it cannot exist awareSearcher robots in the execution. As seen previ¬ 
ously, no righter robot can meet r m i n . At the time where Rule Mg is executed there is 
a righter robot r in the execution. In the case r never meets a dumbSearcher robot, it 
executes Rule Ms at each instant time. Hence, using the arguments as the one used in case 
2, in finite time, r can be located on the same node as r m i n , which is a contradiction. This 
implies that there exists a time at which r, as a righter robot, meets at least a dumbSear¬ 
cher robot r' . In this case r executes Rule M 7 (refer to the predicate RighterWithSear- 
cher{ )) and all the dumbSearcher robots located with r including r' execute Rule Mg (by 
the predicate DumbSearcherMmRevelation() and since id r > id Tmvn ). Hence r and all 
the dumbSearcher robots located with r become awareSearcher robots and execute the 
function SearchQ. When a robot executes the function SearchQ while there are multiple 
robots on its node, if it possesses the maximum identifier among the robots of its node, 
it points to the left direction, otherwise it points to the right direction. Therefore, once 
M7 and Mg are executed, there are at least two awareSearcher considering two opposite 
directions. Moreover once M7 and Mg are executed, except r m i n there are only dumbSear¬ 
cher and awareSearcher robots in the execution. When a dumbSearcher robot meets an 
awareSearcher robot, it executes Rule Mio and therefore becomes awareSearcher robot 
and executes the function SearchQ. An awareSearcher executes Rule Mu at each in¬ 
stant time, therefore it calls the function SearchQ at each instant time. While executing 
the function SearchQ, if an awareSearcher robot is alone on its node, it points to the last 
direction it points to (this direction cannot be equal to A. by Lemma 6.4). All this implies 
that in finite time an awareSearcher robot is located on the same node as r m i n . Therefore 
by Rule Mi and predicate AlinDiscovery(), r m in becomes min. 


□ 
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By Lemmas 6.3 and 6.5, we can deduce the following corollary which proves the correctness 
of Phase M. 

Corollary 6.4. r m in becomes min in finite time and the other robots never become min. 

Correctness Proof of Phase K 

Once r m i n completes Phase M, it stops to move and waits for the completion of Phase K. We 
recall that, during Phase K of GDG, 1Z — 3 robots must join r m i n on the node where it is waiting. 
More precisely, while executing GDG, Phase K is achieved when 1Z — 3 waitingWalker robots 
are located on the node where r m * n , as min, is waiting. In the previous section, we prove that, in 
finite time, only r m i n becomes min (Corollary 6.4) and that once r m i n is min it stays min for the 
rest of the execution (Lemma 6.1). Note that, by the rules of GDG, the min is necessarily a min- 
WaitingWalker robot before being a minTailWalker (since only a minWaitingWalker can 
become a minTailW alker while executing Rule Ki). Moreover, by Rule K2, r m in, as a min- 
WaitingWalker , does not move until 7Z — 3 waitingW alker robots are on its node. Therefore, 
as minW aitingW alker, r m i n is, as expected, always on the same node. Let u be the node on 
which r m i n , as a minWaitingWalker , is located. Let t m i n be the time at which r m j n becomes a 
minW aitingW alker robot. In this section, we consider the execution from time t m i n . 

To simplify the proofs, we introduce the notion of tower M inC on figuration as follows. 

Definition 6.1 {towerMinConfiguration). A towerMinConfiguration corresponds to a con¬ 
figuration of the execution in which IZ — 3 waitingW alker robots are located on the same node as 
the minW aitingW alker. 

To prove the correctness of Phase K, we hence have to prove that, in finite time, a towerMin- 
Configuration is formed. 

As noted previously, by the rules of GDG, as long as there is no towerMinConfiguration, 
^min stays a minW aitingW alker robot. 

The following observation is useful to prove the correctness of this phase. 

Observation 6.3. There exists no rule in GDG permitting a robot that stops being either 
minW aitingW alker or waitingW alker robot to be again a minW aitingW alker or waiting- 
Walker robot. 

To prove the correctness of this phase, we prove, first, that if a potentialMin is present in the 
execution then, in finite time, a towerMinConfiguration is present in the execution, next, we 
prove that if there is no potentialMin in the execution then, in finite time, a towerMinConfi¬ 
guration is also present in the execution. We prove this respectively in Lemmas 6.15 and 6.16. 
To simplify the proofs of these two lemmas, we need to prove the nine following lemmas. 

In the following lemma, we prove that it can exist at most one towerMinConfiguration in 
the whole execution. 

Lemma 6.6. It can exist at most one towerMinConfiguration in the whole execution. 

Proof. By definition a towerMinConfiguration is composed of one minW aitingW alker and 
TZ — 3 waitingW alker robots. Once a towerMinConfiguration is formed, the IZ — 2 {IZ — 2 >2) 
robots involved in the tower MinCon figuration execute Rule Ki. While executing this rule the 
robot with the maximum identifier among the IZ — 2 robots involved in the tower MinC on figu¬ 
ration becomes headW alker while the minW aitingW alker becomes minTailW alker and the 
other robots involved in the towerMinConfiguration become tailWalker. 

Then by Observation 6.3 and since by Corollary 6.4 only r m j n can be minWaitingWalker , 
the lemma is proved. □ 
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In the following lemma, we prove that all the waitingWalker as well as the minWaiting- 
Walker are located on node u and do not move. This is important to prove that, in finite time, a 
towerMinConfiguration is formed. 

Lemma 6.7. All waitingWalker robots are located on the same node as r m i n when kind rmin = 
minWaitingWalker and neither the waitingWalker robots nor r m i n , as a minWaitingWalker, 
move. 

Proof. By the rules of GBG, as long as there is no towerMinConfiguration, r m i n is min- 
WaitingWalker. While r mm is the minWaitingWalker , it executes Rule K2 at each instant 
time. While executing this rule, r m i n points to the _L direction and therefore does not move. 

Only Rule K3 permits a robot r to become a waitingWalker robot. For this rule to be 
executed r must be located with a minW aitingW alker (refer to predicate PotentialMinOr- 
SearcherWithMin( )). By Corollary 6.4, only r mm can be minW aitingW alker. While executing 
Rule K3, r points to the _L direction and therefore at the time of the execution of this rule, r does 
not move and is on the node where r m i n , as a minWaitingWalker , is located. 

While r is a waitingWalker robot, as long as there is no tore erM inConfiguration in the 
execution, it executes Rule K 2 at each instant time. Therefore r does not move. As noted 
previously, the location where r stops moving is the location where r m i n , as the minW aiting- 
Walker, is located. 

Once a tow erM inConfiguration is present in the execution the w aitingW alker robots and 
the minW aitingW alker composing this tower MinC on figuration execute Rule Ki. While ex¬ 
ecuting this rule the robots do not change the direction they point to and stop being waiting¬ 
Walker / minW aitingW alker robots. Therefore, by Observation 6.3 and since by Corollary 6.4 
only r m i n can be minW aitingW alker, all waitingWalker robots are located on the same node 
as r mm when kind rmin = minW aitingW alker and neither the waitingWalker robots nor r m i n , 
as a minWaitingWalker , move. □ 

Now we prove a property on potentialMin. 

Lemma 6.8. It can exist at most one potentialMin robot in the whole execution. 

Proof. Only the execution of Rule Mg permits a robot to become a potentialMin robot. Rule 
M6 is executed when 1Z — 1 righter robots are located on a same node. When these 1Z — 1 
righter robots execute Rule Me, one becomes a potentialMin , and the others become durnb- 
Searcher. Therefore, by Observations 6.1 and 6.2 this rule can be executed only once. Moreover, 
by the rules of GOG, once a potentialMin stops to be a potentialMin , it cannot be again a 
potentialMin. Hence the lemma is proved. □ 

The following lemma demonstrates a property on min. 

Lemma 6.9. Before being min, r m i n is either a righter robot or a potentialMin robot. 

Proof. A robot that is a min is a robot such that its variable kind is either equal to minWaiting- 
Walker or to minTailWalker. The only way to be a minTailWalker robot is to be a min- 
W aitingW alker robot and to execute Rule Ki. The only way to be a minW aitingW alker is to 
execute Rule Mi. Only righter robots or potentialMin robots can execute Rule Mi (refer to 
predicate PotentialMinOrRighter ()). □ 

The three following lemmas give properties on the execution, when r rn j n is min. Indeed, they 
indicate the presence or absence of righter /potentialMin in the execution while r min is min. 

Lemma 6.10. In the suffix of the execution starting from the time where r m i n is min, it is not 
possible to have a potentialMin robot and a righter robot present at the same time. 
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Proof. By Lemma 6.9, r m i n is either a righter or a potentialMin before being min. In the case 
where r m j n is a potentialMin before being min, then by Lemma 6.8, it cannot exist a potential¬ 
Min in the execution after r mm becomes min. Therefore the lemma is proved in this case. 

Consider now the case where r min is a righter before being min. For a robot to become a 
potentialMin Rule Mg must be executed. This rule is executed when IZ — 1 righter are located 
on a same node. While executing Rule Me, among the IZ — 1 righter located on a same node, the 
one with the minimum identifier becomes potentialMin while the others become dumbSearcher. 
By Observation 6.2, r m i n cannot be among the IZ — 1 righter that execute Rule Me, otherwise 
it cannot be a righter before being min. Similarly thanks to Observation 6.2, the 1Z — 1 robots 
that execute Rule Me, cannot be righter anymore after the execution of this rule, therefore, it is 
not possible to have a potentialMin and a righter in the execution once r mm is min. □ 

Lemma 6.11. If there exists a time t at which a righter, a robot r (r / r m i n ) such that 
kind r / righter and r m i n , as min, are present in the execution, then there is no more potential¬ 
Min in the suffix of the execution starting from t. 

Proof. By Lemma 6.10, since there is a righter at time t, there is no potentialMin in the execu¬ 
tion at time t. 

Since at time t, r m i n and r are not righter and can never be righter anymore (refer to 
Observation 6.2), it is not possible to have IZ — 1 righter located on a same node after time t. 
However, in order to have a potentialMin in the execution, Rule Me must be executed. This rule 
is executed only if IZ — 1 righter are located on a same node. Therefore there is no potential¬ 
Min in the execution after time t. □ 

Lemma 6.12. If there is a potentialMin at a time t, and if before being min, r m i n is a righter, 
then there is no more righter in the suffix of the execution starting from time tl = max{t,t m i n }. 

Proof. Assume that before being min, r m i n is a righter. Moreover assume that there is a poten¬ 
tialMin in the execution at time t. 

(*) For a robot to become a potentialMin Rule Me must be executed. This rule is executed 
when IZ — 1 righter are located on a same node. While executing Rule Me, among the IZ — 1 
righter located on a same node, the one with the minimum identifier becomes potentialMin while 
the others become dumbSearcher. By Observation 6.2 none of these IZ — 1 robots can become 
righter anymore after time t. 

Consider then the two following cases. 

Case 1: t > t m i n . 

By Observation 6.2, r m i n cannot be a righter after time t m i n . Therefore r m i n is not among 
the IZ — 1 robots that execute Rule Me, and hence, by (*), after time t, there is no more 
righter in the execution. 

Case 2: t < t m i n . 

By (*), r m .i n cannot be among the IZ — 1 righter that execute Rule Me, otherwise it cannot 
be a righter before being min. Therefore, by (*) and since after time t m in, by Observa¬ 
tion 6 . 2 , r m i n cannot be a righter anymore, there is no more righter in the execution after 
time I m! i L ■ 


Flit' following lemma is an extension of Lemma 6.4. While Lemma 6.4 is true only when all 
the robots are executing Phase M, the following lemma is true whether the robots are executing 
Phase M or Phase K. 
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Lemma 6.13. If there is no tower MinCon figuration in the execution, if, at time t, a robot 
r is such that kind r G {potentialMin, dumbSearcher, awareSearcher}, then, during the Move 
phase of time t — 1, it does not point to the _L direction. 

Proof. Consider a robot r such that at time t, kind r = potential Alin. By Lemma 6.2, r points to 
the right direction during the Move phase of time t — 1. Hence the lemma is proved in this case. 

Consider now a robot r such that, at time t, kind r G {dumbSearcher,awareSearcher}. 
Since there is no tower AlinCon figuration in the execution, by the rules of GDG and knowing 
that initially all the robots are righter, there are only righter, potential Alin, dumbSearcher, 
awareSearcher, waitingWalker and minWaitingWalker robots in the execution. Note that 
there is no rule in GDG permitting a waitingWalker or a minW aitingW alker to become either 
a dumbSearcher or an awareSearcher. 

Consider then the two following cases. 

Case 1: At time t — 1, r is neither a dumbSearcher nor an awareSearcher. 

Whatever the value of the variable kind of r at time t — 1 (righter or potential Alin), to 
have its variable kind at time t equals either to dumbSearcher or to awareSearcher, r 
executes at time t — 1 either Rule K4, M5, Me or M7. 

When a robot executes Rule K4, it calls the function BecomeAwareSearcher(_). When 
a robot executes the function BecomeAwareSearcher(_), it sets its direction to the 
right direction, therefore the lemma is also true in this case. 

Then, we can use the arguments of the proof of Lemma 6.4 to prove that the current lemma 
is true for the remaining cases. Indeed, even if in Lemma 6.4 the context is such that there 
is no min in the execution, the arguments used in its proof are still true in the context of 
the current lemma. 

Case 2: At time t — 1, r is a dumbSearcher or an awareSearcher. 

Whatever the value of the variable kind of r at time t — 1 (dumbSearcher or awareSear¬ 
cher), to have its variable kind at time t equals either to dumbSearcher or to awareSear¬ 
cher, r executes at time t — 1 either Rule M9, M10 or Mu. Similarly as for the case 1, we 
can use the arguments of the proof of Lemma 6.4 to prove that the current lemma is true in 
these cases. 


□ 

The following lemma proves that in the case where there are at least 3 robots in the execution 
such that they are either potential Alin, dumbSearcher or awareSearcher, then, in finite time, 
at least one of these kinds of robots is located on node u. A potential Alin, a dumbSearcher or 
an awareSearcher located with the minW aitingW alker becomes a w aitingW alker (Rule K 3 ). 
Therefore, this lemma permits to prove that in the case where there are at least 3 robots in the 
execution (after time t m i n ) such that they are either potential Alin, dumbSearcher or aiuare- 
Searcher, then, in finite time, a supplementary waitingWalker is located on node u. 

To prove the following lemma, we need to use the Seg(u,v) notion (refer to Section 3.2.1). 
We recall that Seg(u, v) is the set of nodes (in the footprint of the dynamic ring) between node u 
not included and v not included considering the right direction of the robots of the system. 

Lemma 6.14. If there is no tower AlinCon figuration in the execution but there exists at a time 
t at least 3 robots such that they are either potential Alin, dumbSearcher or awareSearcher, then 
it exists a time tl >t at which at least a potential Alin, a dumbSearcher or an aw are Searcher, 
reaches the node u. 
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Proof. Assume that there is no tower MinC on figuration in the execution. By the rules of 
GDG and knowing that initially all the robots are righter, this implies that there are only righter, 
potential Min, dumb Searcher, awareSearcher, waitingW alker and minW aitingW alker robots 
in the execution. Since there is no tower MinC on figuration, r m i n is minW aitingW alker and 
is located on node u. By Lemma 6.7, we know that all the waitingW alker robots (if any) are 
on node u and r min as well as the waitingW alker robots do not move. This implies that among 
the robots that are not on node u there are only righter, potentialMin, dumbSearcher and 
awareSearcher. 

Assume by contradiction that at a time t, there are at least 3 robots such that they are either 
potentialMin, dumbSearcher or awareSearcher and such that for all time t' > t none of these 
kinds of robots succeed to reach the node u at time t'. We consider the execution from time t. 

Consider a robot r such that at time t, kind r G {potentialMin, dumbSearcher, awareSear¬ 
cher}. 

(i) If r is an awareSearcher, since it cannot reach u, it executes Rule Mu, and hence it 
executes the function SearchQ. The variable kind of r is not updated while r executes this 
function, therefore r is an awareSearcher and executes Rule Mu and the function SearchQ at 
each instant time from time t. Thus by Lemma 6.13, r always points to a direction different from 
_L after time f included. 

(ii) If r is a dumbSearcher, since it cannot reach u, it can execute either Rule Mio (if it is on 
the same node as an awareSearcher) and hence becomes an awareSearcher robot and executes 
the function SearchQ, Rule Mg (if it is on the same node as a righter ) and hence becomes 
an awareSearcher and executes the function SearchQ, or Rule Mu and hence stays a dumb¬ 
Searcher and executes the function SearchQ. By Lemma 6.13 and by (Q, r always points to a 
direction different from _L after time t included. 

(Hi) If r is a potentialMin, by Lemma 6.10, there is no righter in the execution at time t and 
therefore by Observation 6.2 there is no righter in the execution after time t included. Therefore, 
since r cannot reach u, it can execute either Rule M 5 (if it is on the same node as an aware¬ 
Searcher) and hence becomes an awareSearcher and executes the function SearchQ, or Rule 
M§ and hence stays a potentialMin and points to the right direction. Therefore by Lemma 6.13 
and by (i), r always points to a direction different from _L after time t included. 

(iv) If there is a righter robot in the execution after time t, then by Lemma 6.11, there is 
no potentialMin robot in the execution after time t included. If a righter robot is on the same 
node as a dumbSearcher or as an awareSearcher, it executes Rule M 7 and hence becomes an 
awareSearcher and executes the function SearchQ. 

( v ) While executing the function SearchQ if a robot is isolated it points to the last direction 
it pointed to. While executing the function SearchQ if a robot is not isolated, if it possesses 
the maximum identifier among all the robots of its current location it points to the left direction 
otherwise it points to the right direction. 

( vi) Note that if there is a potentialMin while r m , n is minW aitingW alker, then it possesses 
the minimum identifier among all the robots not located on node u. Indeed, only Rule Mg permits 
a robot to become a potentialMin. For this rule to be executed, TZ — 1 righter robots must be 
located on a same node. While executing this rule the robot with the minimum identifier among 
the TZ — 1 robots located on a same node becomes potentialMin. Since, by Lemma 6 . 8 , there is 
only one potential Alin in the whole execution and since by definition r m i n possesses the minimum 
identifier among all the robots of the system, r mtn does not execute Rule Mg. Therefore, while 
rmi n is minW aitingW alker, the potential Alin possesses the minimum identifier among all the 
robots not located on node u. Thus, when a potentialMin executes Rule Ms and hence points to 
the right direction, it possesses the same behavior as if it was executing the function SearchQ. 

Case 1: There is no eventual missing edge. 

Call d the direction of r during the Look phase of time t, and let v be the node where r is 
located during the Look phase of time t. Call w the adjacent node of v in the direction d. 
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Call e the edge between v and w. As proved in cases (i), (ii) and (in), d is either equal to 
right or left. 

We want to prove that it exists a time t! (t' > t) such that a robot r' (it is possible to 
have r' = r) with kind r ’ € {potentialMin, dumbSearcher, awareSearcher} points to the 
direction d and is located on w during the Look phase of time t'. 

Call t” (t v > t ) the first time after time t included where there is an adjacent edge to v. 
If during the Move phase of time t”, r does not point to the direction d, by (i) — (vi) this 
necessarily implies that when r executes the function SEARCH0 (or a function that behaves 
like the function SearchQ) there is at least another robot on its node. Moreover by (i) — (vi) 
the other robot(s) with r also executes the function SearchQ (or a function that behaves 
like the function SearchQ) and is or becomes potentialMin, dumbSearcher or aware¬ 
Searcher. Therefore, since all the robots possess distinct identifiers and by (v), during the 
Move phase of time t”, a robot among {potentialMm, dumbSearcher, awareSearcher} on 
node v points to the direction d. 

Since all the edges are infinitely often present, we can repeat these arguments on each 
instant time until the time t e where e is present. At time t e a robot (either potentialMin, 
dumbSearcher, awareSearcher ) points to the direction d and hence crosses e. Since the 
direction pointed to by a robot can be updated only during Compute phases, we succeed to 
prove that t' exists. 

Applying these arguments recurrently we succeed to prove that in finite time a robot r” 
such that kind r ” £ {potentialMin, dumbSearcher, awareSearcher} is on node u. 

Case 2: There is an eventual missing edge. 

Call e the eventual missing edge. Consider the execution after the time greater or equal to 
t where e is missing forever. Call v the node such that its adjacent right edge is e. Call w 
the adjacent right node of v. 

At least two robots that are either potentialMin, dumbSearcher or awareSearcher are 
either on nodes in Seg(u, v) U {u} or on nodes in Seg(w, u) U {te}. 

Assume that there are at least two robots that are either potentialMin, dumbSearcher or 
awareSearcher which are on nodes in Seg(u,v ) U {u}. The reasoning when there are at 
least two robots that are either potentialMin, dumbSearcher or awareSearcher which are 
on nodes in Seg(w, u) U {rc} is similar. 

The edge e is an eventual missing edge. It can exist only one eventual missing edge in 
COT ring. Therefore all the edges between the nodes in {«} U Seg(u, v ) U {u} are infinitely 
often present. Thus, if there exists a robot (either potentialMin, dumbSearcher or aware¬ 
Searcher) that points to the left direction then we can apply the arguments of case 1 
to prove that in finite time a robot r”, such that kind r » € {potentialMin, dumbSear¬ 
cher, awareSearcher}, is on node u. 

Therefore consider that all the robots, that are either potentialMin, dumbSearcher or 
awareSearcher and that are located on nodes in Seg(u,v) U {u}, point to the right direc¬ 
tion. In this case a robot either potentialMin, dumbSearcher or awareSearcher cannot 
be located on the same node as a robot either righter, potentialMin, dumbSearcher or 
awareSearcher, otherwise during the Move phase of the time of this meeting, by (i) — (vi), 
it exists a robot either potentialMin, dumbSearcher or awareSearcher that points to the 
left direction. 

Since e is an eventual missing edge, and since there are at least two robots either poten¬ 
tialMin, dumbSearcher or awareSearcher that point to the right direction, applying the 
arguments of case 1 on two of these robots, we succeed to prove that in finite time two of 
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these robots are located on v. Therefore, by the previous paragraph, in finite time a robot 
r”, such that kind r » € {potentialMin, dumbSearcher, awareSearcher }, is on node u. 


□ 

Now, we prove one of the two main lemmas of this phase: we prove that if a potential- 
Min is present in the execution, then, in finite time, a towerMinConfiguration is present in the 
execution. While proving this lemma, we also prove that, at the time when the towerMinConfi¬ 
guration is formed, among the two robots not involved in this towerMinConfiguration, it can 
exit at most one righter. This information is useful to prove Phase T. 

Lemma 6.15. If there is a potentialMin in the execution, then there exists a time t at which a 
towerMinConfiguration is present and among the robots not involved in the towerMinConfi¬ 
guration there is at most one righter robot at time t. 

Proof. Assume that there exists a time t at which a potentialMin robot is present in the execu¬ 
tion. Assume by contradiction that there is no towerMinConf iguration in the execution. In the 
following, we consider the execution from time t' = max{t, t m i n }. 

Since there is no towerMinConfiguration, by the rules of GDG and knowing that initially 
all the robots are righter, there are in the execution only righter, potentialMin, dumbSear¬ 
cher, aiu are Searcher, waitingWalker and minW aitingW alker robots. By Lemma 6.7, all the 
waitingWalker are located on the same node as r m i n , when kind rmin = minWaitingWalker, 
and both r m i n , as a minW aitingW alker, and the waitingW alker robots do not move. By 
Corollary 6.4, only r m j n can be a minW aitingW alker. We recall that r min as minW aiting- 
W alker is located on node u. Therefore the minW aitingW alker and all the waitingW alker (if 
any) are located on node u. 

By Lemma 6.9 we know that, before being min, r m i n is either a righter robot or a potential¬ 
Min robot. We can then consider the two following cases. 

Case 1: Before being min, r m i n is a righter robot. 

By Lemma 6.12, at time t' there are only potentialMin, dumbSearcher, awareSearcher, 
waitingW alker and minW aitingW alker robots in the execution. Moreover, in this case, 
all the robots that are not on node u are necessarily either potentialMin, dumbSearcher or 
awareSearcher. 

When a potentialMin, a dumbSearcher or an awareSearcher robot meets the minWaiting- 
W alker, it executes Rule K 3 , hence it becomes a waitingW alker and stops to move. 

Then each time there are at least 3 robots in the execution such that they are either poten¬ 
tialMin, dumbSearcher and/or awareSearcher, using Lemma 6.14, we succeed to prove 
that at least one potentialMin, dumbSearcher or awareSearcher succeeds to join the node 
u and therefore becomes a waitingW alker. Therefore, by Lemma 6.7, a towerMinConfi¬ 
guration is formed in finite time. 

Case 2: Before being min, r m i n is a potentialMin. 

For a robot to become a potentialMin, Rule Me must be executed. This rule is executed 
when 77 — 1 righter are located on a same node. While executing this rule, among the 77,-1 
righter located on a same node, one becomes potentialMin while the other become dumb¬ 
Searcher. By Observation 6.2, none of these 77 — 1 robots can become righter anymore. 
Therefore, by Lemma 6 . 8 , once r rnin is min, there are only dumbSearcher, awareSear¬ 
cher, waitingW alker, minW aitingW alker robots and at most one righter robot in the 
execution. Moreover, in this case, among the robots that are not on node u, there are only 
dumbSearcher and aiu are Searcher and at most one righter. By the rules of GDG, as 
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long as a dumb Searcher or an awareSearcher is not on node u, its variable kind stays in 
{dumbSearcher, awareSearcher}. 

Once r m in is min, if there exists a time at which there is no more righter robot in the 
execution, then, using the arguments of case 1, we succeed to prove that a towerMinCon- 
figuration is formed in finite time. Therefore assume that there is always a righter robot 
r in the execution. 

When a dumbSearcher or an awareSearcher robot is located on the same node as the 
minWaitingWalker , it executes Rule K 3 , hence it becomes a waitingWalker and stops 
to move. Then, using multiple times Lemma 6.14 and Lemma 6.7, we know that in finite 
time there are in the execution only one righter and only 2 robots r' and r” such that 
kind r /, kind r » G { awareSearcher, dumbSear cher} 2 (all the other robots are minWaiting- 
Walker and waitingW alker robots and are located on node u). Note that r' (resp. r”) 
cannot be located on node u, otherwise, by Rule K 3 , a towerMinConfiguration is formed. 
Therefore, r' and r” always have their variable kind in {dumbS ear cher, awareSearcher}. 

When a righter robot is located on the same node as an awareSearcher or as a dumb Sear¬ 
cher, it executes Rule M7 and becomes an awareSearcher. Similarly, if a righter is on the 
same node as a minW aitingW alker while the adjacent right edge to its position is present, 
then the righter robot executes Rule K4 and becomes an awareSearcher. Therefore, as 
highlighted previously, these situations cannot happen, otherwise a tower MinCon figura¬ 
tion is formed in finite time. This implies that, as long as the robot r is not on node u, it 
must be isolated. Since r’ and r” cannot be located on node u, if r succeeds to join the node 
u in the case there is no present adjacent right edge to u, then r executes Rule Ms and 
therefore stays a righter and points to the right direction. Therefore, since an isolated 
righter robot always executes Rule Ms, hence always points to the right direction, this 
implies that either r is on a node v (v 7^ u) such that the adjacent right edge of v is an 
eventual missing edge at least from the time where r is on node v (case 2.1) or r succeeds to 
reach u but the adjacent right edge of u is an eventual missing edge at least from the time 
where r is on node u (case 2.2). 

(*) When an awareSearcher or a dumbSearcher is isolated it executes Rule Mu, hence 
executes the function SEARCH0, therefore it points to the last direction it pointed to. By 
Lemma 6.13, this direction cannot be equal to _L. 

(**) Since only r’ and r” have their variable kind in {dumb Sear cher, aw are Sear cher} 2 , 
and since r’ and r” cannot be located on node u and cannot be located with r, if a dumb¬ 
Searcher is located on the same node as an awareSearcher or if an awareSearcher (resp. 
a dumbSearcher ) is located on the same node as another awareSearcher (resp. dumb¬ 
Searcher), necessarily this means that r’ and r” are located on a same node, and there is 
no other robot on the same node as them. When a dumbSearcher is on the same node as an 
awareSearcher it executes Rule M10, hence it becomes an awareSearcher and executes 
the function SearchQ. When an awareSearcher is on the same node as a dumbSear¬ 
cher it executes Rule Mu and hence executes the function SearchQ. Since r / and r” have 
distinct identifiers, when an awareSearcher and a dumbSearcher are on a same node, they 
both execute the function SEARCH0, therefore one points to the right direction, while the 
other one points to the left direction. Similarly, if two awareSearcher (resp. dumbSear¬ 
cher) robots are on the same node, they both execute Rule Mu and hence the function 
Search (), therefore one points to the right direction, while the other one points to the left 
direction. 

Case 2.1: Let w be the adjacent node of v in the right direction. It can exist only one 
eventual missing edge, which is the adjacent right edge of node v. Therefore, if a 
robot, in Seg(u,v) or in Seg(w,u), points to a direction d and does not change this 
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direction, it eventually succeeds to move in this direction. Similarly, if a robot is on 
node w and always points to the right direction, it eventually succeeds to move in this 
direction (* * *). 

Firstly, assume that only r' (resp. r”) is on a node in Seg(u,v). By (*) and (* * *), 
r' (resp. r”) cannot point to the right direction, otherwise it reaches r in finite time. 
Therefore r' (resp. r”) points to the left direction. By (*) and (***), in finite time, r' 
(resp. r”) succeeds to reach u, implying that a towerMinConfiguration is formed. 
Secondly, assume that r' and r” are on nodes in Seg(u,v). By (*), (**) and (* * *), 
they cannot meet otherwise one of them reaches u in finite time. Moreover, if they do 
not meet, none of them can point to the left direction otherwise, by (*) and (***), 
they reach u in finite time. Therefore, they cannot meet and must point to the right 
direction. By (*) and (***), in finite time one robot among r' and r” succeeds to reach 
r, implying that a towerMinConfiguration is formed. 

Thirdly, assume that r and r” are on nodes in Seg(v,u). By (*), (**) and (* * *), 
they cannot meet otherwise one of them reaches u in finite time. Moreover, if they do 
not meet, none of them can point to the right direction otherwise, by (*) and (***), 
they reach u in finite time. Therefore, they cannot meet and must point to the left 
direction. However, by (*) and (***), since the adjacent right edge of v is missing 
forever, in finite time r' and r” reach w, which is a contradiction with the fact that 
they do not meet. 

Case 2.2: Applying the arguments used in the case 2 . 1 , when r' and r” are on nodes in 
Seg(v, u), to r' and r” when there are on nodes in Seg{u, u), we succeed to prove that 
in finite time at least one of them reaches node u, making Rule Terrri 2 true, which 
leads to a contradiction. 


□ 

Finally, we prove the other main lemma of this phase: we prove that even if there is no po- 
tentialMin in the execution, then, in finite time, a tower MinC on figuration is present in the 
execution. While proving this lemma, we also prove that, at the time when the tow erM inConfi¬ 
guration is formed, among the two robots not involved in this tower MinCon figuration, it can 
exit at most one righter. This information is useful to prove Phase T. 

Lemma 6.16. If there is no potentialMin in the execution, then there exists a time t at which a 
tow erM inConfiguration is present and among the robots not involved in the tower MinC on fi¬ 
guration there is at most one righter robot at time t. 

Proof. Assume, by contradiction, that there is no tow erM inConfiguration in the execution. By 
the rules of GDG and knowing that initially all the robots are righter , this implies that there are 
only righter, potentialMin, dumbSearcher, awareSearcher, waitingWalker and minW aiting- 
Walker robots in the execution. 

Assume that there is no potentialMin in the execution. If there is no potentialMin in the 
execution, it cannot exist dumbSearcher in the execution. Indeed, the only way for a robot to 
become dumbSearcher is to execute Rule Me- However, when this rule is executed, a robot 
becomes potentialMin. Therefore, there are in the execution only righter, awareSearcher, 
waitingWalker and minWaitingWalker robots. 

Before time t m i n , by the rules of GDG, there are only righter in the execution. Indeed, by 
Corollary 6 . 4 , only r m) ; n can be minWaitingWalker and it becomes minW aitingW alker at time 
t m i n . Moreover, the only way for a robot to become waitingW alker is to execute Rule K3. In the 
case where there is no potentialMin in the execution, only an awareSearcher located with r m i n , 
as a minW aitingWalker , can execute this rule. Besides, the only ways for a robot to become an 
awareSearcher is either to be a righter and to be located with an awareSearcher (refer to Rule 
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M 7 ), or to be a righter and to be located with r m j n , as a minWaitingWalker , while an adjacent 
right edge to their location is present (refer to Rule K 4 ). Since initially all the robots are righter, 
the first awareSearcher of the execution can be present only thanks to the execution of Rule K 4 . 

All this implies that, even after time t m i n , as long as no righter robot is on node u with 
Tmim as a minW aitingW alker, while there is a present adjacent right edge to u, it can exist 
neither awareSearcher nor w aitingW alker in the execution: there is at most one minWaiting- 
Walker and there are at least 77. — 1 righter. Moreover, this implies that as long as the situation 
described has not happened, all the righter robots only execute Rule Ms, hence always point to 
the right direction. 

Consider the execution just after time t m i n . In this context, necessarily, in finite time, there 
exists a righter robot r that succeeds to reach u (while r min is minW aitingW alker) . Indeed, 
if this is not the case, this implies that there exists an eventual missing edge e. Since all the 
righter robots always point to the right direction and since it can exist at most one eventual 
missing edge, this implies that 77. — 1 righter robots reach in finite time the same extremity of 
e. Thus, Rule Mg is executed, which leads to a contradiction with the fact that there is no 
potential Min in the execution. 

Similarly, necessarily, in finite time, there exists an adjacent right edge to u while r is on u. 
Indeed, if this is not the case, this implies that the adjacent right edge of u is an eventual missing 
edge. Since all the righter robots always point to the right direction and since it can exist at 
most one eventual missing edge, in finite time all the righter succeed to be located on node u. 
This implies that Rule Termi is executed, which leads to a contradiction. 

Therefore there exists a time t! at which r executes Rule K 4 . At this time r becomes an 
awareSearcher robot and points to the right direction. We then consider the execution from 
time t'. 

(*) From this time t' , as long as there exists righter in the execution, it always exists an 
awareSearcher robot r' pointing to the right direction, such that there is no righter robots on 
Seg(u, v), where v is the node where r' is currently located. This can be proved by analyzing the 
movements of the different kinds of robots that we describe in (i) — (vii). 

(i) By Lemma 6.7, all the minW aitingW alker and waitingW alker (if any) are on a same 
node (which is the node u) and do not move. 

(ii) If an awareSearcher is located on node u, therefore if it is located with r m i n , as a min- 
W aitingW alker , it executes Rule K 3 and becomes a waitingW alker robot. 

(in) If an awareSearcher is on a node different from the node u, the only rule it can execute 
is Rule Mu, in which the function SearchQ is called. While executing this function, an isolated 
awareSearcher points to the direction it points to during its last Move phase. By Lemma 6.13, 
this direction cannot be _L. 

(iv) If a righter robot is located only with other righter robots or if it is located on node u, 
therefore if it is located with r mm , as a minWaitingWalker , such that there is no adjacent right 
edge to u, it executes Rule Mg, hence it stays a righter and points to the right direction. 

( v ) If a righter robot is with r min , as a minW aitingW alker , such that there is an adjacent 
right edge to u, then it executes Rule K 4 and hence becomes an aw are Searcher. 

(vi) If a righter robot is on a node different from node u with an awareSearcher, it executes 
Rule M7 and therefore becomes awareSearcher and executes the function SearchQ. 

(vii) Note that by the movements described in (i) to (vi), if a robot executes the function 
SearchQ, then all the robots that are on the same node as it also execute this function. While 
executing the function SearchQ, if multiple robots are on the same node, one points to the left 
direction, while the others point to the right direction. 

Applying these movements on r' and recursively on the robots that r' meet that point to the 
right direction after their meeting with r' and so on, we succeed to prove the property (*). 

(**) Note that if there exists a time at which there is no more righter in the execution, then 
by applying (ii), Lemma 6.7 and Lemma 6.14 multiple times we succeed to prove that a tower- 
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MinC on figuration is formed. Therefore at least one robot is always a righter during the whole 
execution. Call S r the set of righter robots that stay righter during the whole execution. 

Let us consider the following cases. 

Case 1: There does not exist an eventual missing edge. 

None of the robots of S r can be located on the same node as an aw are Searcher, otherwise, 
by (vi), they become aw are Searcher. Therefore, all the robots of S r that are not on node 
u can only point to the right direction (refer to ( iv )). Since all the edges are infinitely often 
present, for each robot r” of S r , it exists a time at which r” is on node u. Moreover, once 
on node u, as long as there is no adjacent right edge to u, r” points to the right direction 
(refer to (iv)), and therefore stays on node u. Thus, since all the edges are infinitely often 
present, for each robot r” of S r , it exists a time at which r” is on node u such that an 
adjacent right edge to u is present. Therefore, by (v), in finite time, all the robots of S r are 
awareSearcher robots. Hence, by (**), the lemma is proved. 

Case 2: There exists an eventual missing edge. 

Call x the node such that its adjacent right edge is the eventual missing edge. Consider the 
execution after time t' such that the eventual missing edge is missing forever. 

Case 2.1: x = u. 

None of the robots of S r can be located on the same node as an awareSearcher, 
otherwise, by (vi), they become awareSearcher. Therefore, all the robots of S r that 
are not on node u can only point to the right direction (refer to (iv)). Since it can exist 
at most one eventual missing edge, in finite time the robots of S r succeed to reach 
node u, and stay on node u (refer to (iv)). Necessarily, |«S r | <1Z — 2, otherwise Rule 
Terni 2 is executed. At the time at which all the robots of S r are on node u, by (*), we 
know that at least one awareSearcher, on a node v, points to the right direction. By 
(vi), none of the righter of S r can be located on node v. Therefore, this awareSear¬ 
cher is not on node u. By the movements described in (in) and (vii), we know that 
in finite time an awareSearcher succeeds to reach node u. Then all the righter of S r 
become awareSearcher, hence by (**), the lemma is proved. 

Case 2.2: x / u. 

None of the robots of S r can be located on the same node as an awareSearcher, 
otherwise, by (vi), they become awareSearcher. Therefore, none of the robots of S r 
can be located on Seg(u, x) U {x}, otherwise, in finite time, by (iv) they are located on 
node x. However, once all the robots of S r are on node x, by (*), and the movements 
described in (in) and (vii) an awareSearcher succeeds to be located on node u in 
finite time, which leads to a contradiction. Therefore all the robots of S r are on nodes 
in Seg(x, u). Since it can exist only one eventual missing edge, and since this edge is 
the adjacent right edge of x, for each robot r” of S r , by (iv), it exists a time at which 
r” is on node u while there is a present adjacent right edge to u. Therefore, by (v), in 
finite time all the robots of S r are awareSearcher robots. Hence, by (**), the lemma 
is proved. 

We just proved that it exists a time ttower at which a tower MinCon figuration is present in 
the execution. We now prove that, at time ttower > among the robots not involved in the tower- 
MinC on figuration, there is at most one righter. By Lemma 6 . 6 , there is only one towerMin- 
Con figuration in the whole execution. Necessarily, as explained above when there is no poten- 
tialMin in the execution, in order to have a towerMinConfiguration, a righter must become 
an awareSearcher while executing Rule K 4 . The property (*) is then true. By definition of 
a towerMinConfiguration, only two robots are not involved in the towerMinConfiguration. 
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Assume, by contradiction, that there are two righter not involved in the tow erMinCon figura¬ 
tion at time U OW er■ By (*), this implies that there is an awareSearcher at time tt OW er■ However, 
by definition, a towerMinConfiguration is composed of one minWaitingWalker and 1Z — 3 
waitingWalker , therefore, since there are 1Z robots in the system and among them, at time 
ttower i two are righter and one is an awareSearcher , there is a contradiction with the fact that 
there is a tower MinCon figuration at time ttower■ □ 

By Lemmas 6.15 and 6.16, we can deduce the following corollary which proves the correctness 
of Phase K. 

Corollary 6.5. There exists a time t in the execution at which a towerMinConfiguration is 
present and among the robots not involved in the tower MinC on figuration there is at most one 
righter robot at time t. 

Correctness Proof of Phases W and T 

The combination of Phases W and T of GDG permit to solve G ew i n COT rings. Since G ew is 
divided into a safety and a liveness property, to prove the correctness of Phases W and T, we 
have to prove each of these two properties. We recall that, to satisfy the safety property of 
the gathering problem, all the robots that terminate their execution have to do so on the same 
node, and to satisfy the liveness property of G ew, at least 1Z — 1 robots must terminate their 
execution in finite time. We first prove, in Lemma 6.19, that GDG satisfies the safety of the 
gathering problem in COT rings. Then, we prove, in Lemma 6.21, that GDG satisfies the liveness 
of G ew i n COT rings. To prove these two properties, we need to prove some other lemmas. 

By Corollary 6.5, we know that, in finite time, a tow erMinCon figuration is formed. By 
Lemma 6.6, there is at most one tow erMinC on figuration in the execution. Therefore, there is 
one and only one towerMinConfiguration in the execution. Call T such a tower MinC on figu¬ 
ration. Let ttower be the time at which T is formed. By definition, a towerMinConfiguration is 
composed of 1Z — 2 robots. If among the robots that are not involved in T one is a righter or 
a potentialMin , then call it r\, and call r 2 the other robot not involved in T. If among the two 
robots that are not involved in T none of them are righter or potentialMin, then call one of them 
n, and the other one r 2 . 

In the previous section, we prove that, at time ttower, at most one of the robots among the 
two robots not involved in T is a righter. In the following lemma, we go farther and give the set 
of possible values for the variable kind at time ttower of each of these robots. 

Lemma 6.17. At time ttower, kind ri G {righter, potentialMin, dumbSearcher, awareSear¬ 
cher} and kind r2 G {dumbSearcher, aw are Searcher}. 

Proof. Until the Look phase of time ttower , by the rules of GDG and knowing that all the robots 
are initially righter, there are only righter, potentialMin, dumbSearcher, awareSearcher, 
waitingW alker and minWaitingWalker robots in the execution. 

By Corollary 6.4, only r mm can be min, therefore only r m i n can be minWaitingWalker. By 
definition of a towerMinConfiguration, a minWaitingWalker is involved in T. Since r\ and 
r 2 are not involved in T, this implies that neither r\ nor r 2 can be minW aitingW alker at time 

ttower- 

By definition of a towerMinConf iguration, at time t toW er, the 1Z — 2 robots involved in T 
are on a same node. This node is the node u. Therefore, at time ttower neither r\ nor r 2 can be 
located on node u, otherwise Rule Term 2 is executed. By Lemma 6.7, this implies that neither 
r\ nor r 2 can be a waitingW alker at time U OW er- 

By Corollary 6.5, at time ttower, only one robot among r\ and ?’2 can be a righter robot. 
Assume without lost of generality that r\ is a righter at time ttower- In this case by Corollary 6.5, 
r 2 cannot be a righter at time ttower- Moreover, in this case, by Lemma 6.10, r 2 cannot be a 
potentialMin at time Uower- 
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Now assume without lost of generality that r\ is a potentialMin robot at time ttower■ By 
Lemmas 6.8 and 6.10, r 2 can neither be & potentialMin nor a Tighter at time ttower- 

This proves the lemma. □ 

In the following lemma, we prove a property on Rules Termi and Term 2 that helps us to 
prove that GDG solves G ew i n COT rings. 

Lemma 6.18. If a robot r, on a node x, at a time t, executes Rule Termi (resp. Term 2 ), then 
there are TZ (resp. IZ — 1) robots on node x at time t. and they all execute Ride Termi (resp. 
Term 2 ) at time t (if they are not already terminated). 

Proof. If a robot r, on a node x, executes Rule Termi (resp. Termi) at a time t, by the predicate 
GE{) (resp. GEW(J), there are 7 Z (resp. IZ — 1) robots on x at time t. Moreover, if the predicate 
GE() (resp. GEW ()) is true for r at time t, since the robots are fully-synchronous, it is necessarily 
true for all the robots (not already terminated) located on node x at time t. This implies that all 
the robots (not already terminated) located on x at time t, execute Rule Termi (resp. Terrri 2 ) 
at time t. □ 

Now we prove one of the main lemmas of this section: we prove that GDG solves the safety 
property of the gathering problem in COT rings. 

Lemma 6.19. GDG solves the safety of the gathering problem in COT rings. 

Proof. We want to prove that, while executing GDG, all robots that terminate their execution 
terminate it on the same node. While executing GDG, the only way for a robot to terminate its 
execution is to execute either Rule Termi or Rule Termi. 

By Lemma 6.18, if a robot r, on a node x, at a time t, executes Rule Termi, then there are 
IZ robots on node x at time t and they all execute Rule Termi at time t (if they are not already 
terminated). Therefore, in the case where r executes Rule Termi at time t , all the robots of the 
system are terminated on x at time t, hence the lemma is proved in this case. 

By Lemma 6.18, if a robot r, on a node x, at a time t, executes Rule Term 2 , then there are 
IZ — 1 robots on node x at time t and they all execute Rule Terrri 2 at time t (if they are not 
already terminated). Therefore, in the case where r executes Rule Terrri 2 at time t, IZ — 1 robots 
of the system are terminated on x at time t. Call r' the robot that is not on the node x at time t. 
Let y (y T x) be the node where r is located at time t. To prove the lemma, it stays to prove that 
r' is not terminated at time t, and that after time t, r' either terminates its execution on node x 
or never terminates its execution. 

Assume, by contradiction, that at time t , r' is terminated. This implies that there exists 
a time t' < t at which r' executes either Rule Termi or Rule Term 2 - By Lemma 6.18, this 
implies that at least IZ — 2 other robots are terminated on node y at time t'. Therefore, there is a 
contradiction with the fact that r executes Rule Terrri 2 at time t on node x. Indeed, to execute 
Rule Term 2 at time t on node x, IZ — 1 robots must be located on node x at time t, since IZ > 4, 
it is not possible to have IZ — 1 robots on node x at time t. 

Moreover, after time t, by Lemma 6.18, r' can terminate its execution only on node x (since 
it is the only node where IZ — 1 robots are located). Therefore, the lemma is proved. □ 

The following lemma is an extension of Lemma 6.13. While Lemma 6.13 is true when the 
robots are either executing Phase M or Phase K, the following lemma is true whatever the phase 
of the algorithm the robots are executing. 

Lemma 6.20. If, at time t, an isolated robot r is such that kind r £ {dumbSearcher, aware- 
Searcher}, then, during the Move phase of time t — 1, it does not point to the _L direction. 
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Proof. By the rules of GDG, minWaitingWalker, waitingWalker, minTailW alker, tailWalker, 
headWalker and left.Walker cannot become dumbSearcher or aw are Searcher. 

Consider an isolated robot r such that, at a time t, kind r £ {dumbSearcher, awareSearcher}. 
Consider then the two following cases. 

Case 1: At time t — 1, r is neither a dumbSearcher nor an awareSearcher. 

Whatever the value of the variable kind of r at time t — 1 (righter or potential Min), to 
have its variable kind at time t. equals either to dumbSearcher or to awareSearcher, r 
executes at time t — 1 either Rule K4, M2, M3, M5, Me or M7. 

When a robot executes Rule M 2 , it calls the function BecomeAwareSearcher(_). When 
a robot executes the function BecomeAwareSearcher(_), it sets its direction to the 
right direction, therefore the lemma is true in this case. 

A robot executes Rule M3 only if it is located with a headW alker on a node x. Necessarily 
there is no present adjacent right edge to x at time t — 1, otherwise the robot would have 
executed Rule M2. By the rules of GDG, a headW alker only points to the _L direction or 
the right direction. Indeed, a headW alker can only execute Rules T 2 , T 3 and Wp While 
executing Rule T2, a headW alker becomes a leftW alker and points to the _L direction. 
While executing Rule T3, a headW alker points to the _L direction. Finally, while executing 
Rule Wi, a headW alker points either to the right direction or to the _L direction. There¬ 
fore, even if, after the execution of Rule M3, r points to the _L direction, it is not isolated 
at time t, hence the lemma is not false in this case. 

Then, we can use the arguments of the proof of Lemma 6.13 (in the case where the robot r 
is a dumbSearcher or an awareSearcher at time t) to prove that the current lemma is true 
for the remaining cases. Indeed, even if in Lemma 6.13 the context is such that there is no 
tower MinC on figuration in the execution, the arguments used in its proof are still true in 
the context of the current lemma. 

Case 2: At time t — 1, r is a dumbSearcher or an awareSearcher. 

Whatever the value of the variable kind of r at time t — 1 (dumbSearcher or awareSear¬ 
cher), to have its variable kind at time t equals either to dumbSearcher or to awareSear¬ 
cher, r executes at time t — 1 either Rule M2, M3, Mg, M10 or Mu. 

We can use the arguments of Case 1 to prove that while executing Rule M2 or M3, the 
lemma is proved. 

Then, similarly as for the Case 1, we can use the arguments of the proof of Lemma 6.13 
(in the case where the robot r is a dumbSearcher or an awareSearcher at time t) to prove 
that the current lemma is true in the remaining cases of Case 2 . 


□ 


Finally, we prove that GDG satisfies the liveness of G ew i n COT rings. 

Lemma 6.21. GDG satisfies the liveness ofGEW in COT rings. 

Proof. By contradiction, assume that GDG does not solve the liveness of G ew i n COT rings. 
Since the execution of Rules Termi and Terni 2 permits a robot to terminate its execution, by 
Lemma 6.18, this implies that there exists a COT ring such that, during the execution of GDG, 
neither Rule Termi n or Rule Terrri 2 is executed. Consider the execution of GDG in that ring. 

By Corollary 6.5, there exists a time t at which a towerMinConfiguration is formed. Note 
that 1Z — 2 > 2 robots are involved in a towerMinConfiguration. Once a towerMinCon¬ 
figuration is formed the 7Z — 3 waitingWalker and the minW aitingW alker involved in this 
towerMinConfiguration execute Rule Ki. While executing this rule, the robot r with the 
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maximum identifier among the TZ — 2 robots involved in this towerMinConfiguration becomes 
headWalker, the minWaitingWalker becomes minTailWalker and the other robots involved 
in this towerMinConfiguration become tailWalker. Note that, by Corollary 6.4, only r m ,; n can 
be min, and therefore, since r mtn is the robot with the minimum identifier among all the robots of 
the system and since at least 2 robots are involved in the towerMinConfiguration, r m i n cannot 
become headWalker. By Lemma 6.6 and by the rules of GDG, only r can be headWalker and 
only r mm can be minTailW alker during the execution. 

There is no rule in GOG permitting a tailWalker or a minTailW alker robot to become 
another kind of robot. A tailWalker and a minTailW alker can only execute Rules T 3 and Wi. 
By the rules of GDG, the minTailW alker and the tailWalker execute the same movements at 
the same time starting from the same node, therefore, they are on a same node at each instant 
time. Hence, call tail the set of all of these robots. 

A headWalker can become a leftWalker. However, since we assume that the liveness of 
G ew cannot be solved, then it is not possible for r to become a leftW alker. Indeed, a head¬ 
Walker can only execute Rules T 2 , T 3 and Wi. Note that, by the rules of GDG, after the 
execution of Rule Ki, the headWalker and the tail both execute Rule Wi. Therefore, since the 
headWalker and the tail start the execution of Rule Wi on the same node at the same time, by 
the rules of GDG, while the headWalker is executing Rule T 3 or Rule Wi, if the tail is not on 
the same node as the headWalker, it is either executing Rule Wi or it is terminated. Moreover, 
by the same arguments, in the remaining of the execution, the headWalker and the tail are either 
on a same node or the tail is on the left adjacent node (on the footprint of the dynamic ring) of 
the node where the headWalker is located. Hence, if at a time t', the headWalker executes Rule 
T 2 , and therefore becomes a leftW alker, then this implies that during time t' — 1 it is executing 
either Rule T 3 or Rule Wi while there is an adjacent left edge to its position and at time t' the 
tail is not on its node. Therefore, necessarily the tail is terminated, otherwise as explained the 
tail would have joined the headWalker on its node (Rule Wi). Since only Rules Termi and 
Terrri 2 permit a robot to terminate its execution, by Lemma 6.18, this implies that the tail has 
executed Rule Ter m 2 , which leads to a contradiction with the fact that GDG does not solve the 
liveness of G ew- 

Therefore, during the whole execution (after the execution of Rule Ki), the headWalker, tail¬ 
Walker and minTailW alker stay respectively headWalker, tailWalker and minTailW alker and 
can only execute Rule Wj until their variables walkSteps reach n, and then they can only execute 
Rule T3. 

Call ?’i and r 2 the two robots that are not involved in the towerMinConf iguration at time 
t. Since, by contradiction, neither Rule Termi nor Rule Terrri 2 are true, neither n nor ?"2 can 
meet the headWalker or the tail while they (the headWalker and the tail ) are on a same node. 
Therefore, we assume that this event never happens. 

By Lemma 6.17, at time t, kind ri £ {righter, potentialMin, dumhSearcher, awareSear- 
cher} and kind r2 £ {dumb Searcher, aw are Searcher}. 

Let us first consider all the possible interactions between only r\ and r 2 while kind ri £ 
{righter, potentialMin, dumbSearcher, aw are Searcher} and kind r2 £ {dumb Searcher, aware- 
Searcher}. 

An isolated potentialMin or a potentialMin that is located only with a dumbSearcher stays 
a potentialMin and points to the right direction (Rule Mg). 

If a potentialMin is located only with an aw are Searcher, it becomes an awareSearcher and 
it executes the function Search() (Rule M 5 ). 

An isolated righter stays a righter and points to the right direction (Rule Mg). 

If a righter is located only with a dumbSearcher (resp. an awareSearcher ), it becomes an 
awareSearcher and executes the function SearchQ (Rule M 7 ). 

If a dumbSearcher is located only with a righter, it becomes an awareSearcher and executes 
the function SearchQ (RulcMg). 


85 



Part II, Chapter 6 - Gathering 


If a dumbSearcher is located only with a, potential Min it stays a dumbSearcher and executes 
the function SearchQ (Rule Mu). In this case, while executing the function SearchQ, a dumb- 
Searcher points to the left direction, since it possesses a greater identifier than the one of the 
potentialMin. Indeed, only Rule Me permits a robot to become potentialMin or dumbSear¬ 
cher. This rule is executed when 1Z — 1 righter are located on a same node. While executing 
Rule Me, among the 1Z — 1 righter , the one with the minimum identifier becomes potential¬ 
Min while the others become dumbSearcher. By Observation 6.2, Rule Me can be executed 
only once. Therefore, a dumbSearcher necessarily possesses an identifier greater than the one of 
the potentialMin. 

An isolated dumbSearcher or a dumbSearcher located only with another dumbSearcher stays 
a dumbSearcher and executes the function SearchQ (Rule Mu). 

If a dumbSearcher is located only with an aw are Searcher, it becomes an awareSearcher and 
it executes the function Search() (Rule Mio). 

An isolated aiu are Searcher or an awareSearcher located only with a righter, a potential¬ 
Min, a dumbSearcher or an awareSearcher stays an awareSearcher and executes the function 
SearchQ (Rule Mu). 

When rq and r 2 are on a same node without any other robot, executing the function SearchQ, 
since all the robots possess distinct identifiers, one points to the right direction, while the other 
one points to the left direction. 

While executing the function SearchQ at time i, a robot that is an isolated dumbSearcher or 
an isolated awareSearcher points during the Move phase of time i to the same direction it points 
to during the Move phase of time i — 1. By Lemma 6.20, this direction cannot be equal to _L. 

By the previous movements described, note that, as long as ?q and ?’2 are not located with the 
headWalker or the tail, they are always such that kind ri £ {righter, potentialMin, dumbSear¬ 
cher, awareSearcher} and kind r2 £ {dumbSearcher, awareSearcher}. 

Now, consider the possible interactions between the headWalker and rq and/or r 2 when 
kind ri £ {righter, potentialMin, dumbSearcher, awareSearcher} and kind r2 £ {dumbSear¬ 
cher, awareSearcher}. 

If ?q and/or r 2 , as a righter, potentialMin, dumbSearcher or awareSearcher is on the same 
node as the headW alker such that there is no adjacent right edge to their location, then it 
executes Rule M3, hence it becomes an awareSearcher and stops to move. 

(*) If rq and/or rq, as a righter, potentialMin, dumbSearcher or awareSearcher is on the 
same node as the headW alker such that there is an adjacent right edge to their location, then 
it executes Rule M 2 , hence it becomes an awareSearcher pointing to the right direction and 
therefore crosses the adjacent right edge to its node. 

This implies that, as long as r 1 and r 2 are not located with the tail they are always such that 
kind ri £ {righter, potentialMin, dumbSearcher, awareSearcher} and kind r2 £ {dumbSear¬ 
cher, awareSearcher}. 

Finally, consider the possible interaction between the tail and rq and/or r 2 - If rq and/or rq, as 
a righter, potentialMin, dumbSearcher or awareSearcher is on the same node as the minTail- 
Walker, then it executes Rule M 4 and becomes a tailWalker. From this time, by the function 
BecomeTailWalker(_) and the rules of GDG, the robot belongs to the tail. 

We consider two cases: the case where there exists an eventual missing edge, and the case 
where there is no eventual missing edge during the execution. 

First, we assume that there exists an eventual missing edge. Call i” the time after the execu¬ 
tion of Rule Ki and after the time when the eventual missing edge is missing forever. Consider 
the execution from f”. Since Rule Ki is executed before time f”, then there are headW alker, 
tailW alker and minTailW alker in the execution after time f” included. 

Recall that, while executing Rules Wj and T3, the headW alker and the tail are either on a 
same node or on two adjacent nodes (the tail is on the adjacent left node on the footprint of the 
dynamic ring of the node where the headW alker is located). 
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Case 1: There is an eventual missing edge e between the node where the headWalker 
is located and the node where the tail is located. 

As explained previously, since the headWalker and the tail are not on the same node, this 
necessarily implies that the headWalker either executes Rule Wi or Rule T 3 at time t”, 
and the tail executes Rule Wj at time t”. Therefore, after time t”, the headWalker does 
not move either because it waits for the tail to join it on its node (Rule Wi), or because it 
executes the function StopMovingQ (Rule T 3 ). Similarly, after time f”, the tail does not 
move, since it tries to join the headWalker pointing to the right direction (Rule Wi), but 
the edge is missing forever. 

Since there is at most one eventual missing edge in a COT ring, all the edges, except e, are 
infinitely often present in the execution after time t”. Considering the movements of the 
robots described previously, whatever the direction pointed to by r\ and r 2 at time t” both 
of them succeed eventually to reach the node where the tail is located, making the liveness 
of G ew solved. 

Case 2: The eventual missing edge is not between the node where the headWalker 
is located and the node where the tail is located. 

This implies that there exists a time from which the headWalker and the tail are located 
on a same node and do not move, either because they are executing Rule T 3 , or because 
they are executing Rule Wj but the adjacent right edge the headWalker tries to cross is 
the eventual missing edge. In the second case, by the movements of the robots described 
previously, we succeed to prove that, eventually at most one of the robots among r\ and 
?’2 can be stuck on the extremity of the eventual missing edge where the headWalker and 
the tail are not located, and that at least one of them succeeds to reach the node where the 
headWalker and the tail are located, making the liveness of G ew solved. 

Consider now the first case. Call t n the first time at which the headWalker and the tail 
are on a same node and both execute Rule T 3 . If n and r 2 point to the same direction at 
time t n , then by the movements of the robots described previously, whatever the place of 
the eventual missing edge, we succeed to prove that, eventually at most one of them can 
be stuck on one of the extremities of the eventual missing edge, and that at least one of 
them succeeds to reach the node where the headWalker and the tail are located, making 
the liveness of G ew solved. Similarly, if the headW alker and the tail are located, at time 
t n , on one of the extremities of the eventual missing edge, then, by the movements of the 
robots described previously, we succeed to prove that, eventually at most one of the robots 
among r\ and r 2 can be stuck on the extremity of the eventual missing edge where the head¬ 
Walker and the tail are not located, and that at least one of them succeeds to reach the 
node where the headW alker and the tail are located, making the liveness of G ew solved. 

Now consider the first case, when r\ and r 2 point to opposed directions at time t n and such 
that, at time t n , the headW alker and the tail are not located on one of the extremities of 
the eventual missing edge. It is not possible for both n and r 2 to be eventually stuck on two 
different extremities of the eventual missing edge. Indeed, if r\ and ri point to two opposed 
directions at time t n , this is because, between times U and t n (with U the time at which 
the headW alker and the tail both execute Rule Wi for the first time), they are located 
on a same node (without any other robot on their node). We prove this by contradiction. 
Assume, by contradiction, that r\ and r 2 are never located on a same node (without any 
other robot on their node) between times ti and t n . Consider the execution from time t t 
until time t n . Whatever the direction pointed to by r\ (resp. r-Tj, it cannot be located with 
the tail, otherwise, since there is no eventual missing edge between the headW alker and the 
tail and by the movements of the robots described previously, Rule Term 2 is eventually 
executed. Therefore, r\ (resp. r-f) can only be located with the headWalker. When r\ 


87 



Part II, Chapter 6 - Gathering 


(resp. r 2 ) is located with the headWalker, it necessarily exists an adjacent right edge to 
their position before the adjacent left edge to their position appears, otherwise, the tail joins 
them and Rule Term 2 is executed. By (*), after ri (resp. 7 * 2 ) is on the same node as the 
headWalker while there is an adjacent right edge to their location, it becomes an aware- 
Searcher pointing to the right direction. At time t n , the headWalker and the tail execute 
Rule T 3 , therefore they succeed to execute Rule Wi until their variables walkSteps is equal 
to n. This implies that, if r\ (resp. r 2 ) points to the left direction at time ti, necessarily, 
since it cannot be located with ?’2 (resp. ?’i), by the movements of the robots described 
previously, it exists a time t mee t > U at which the headW alker and the tail execute Rule 
Wi and either the headWalker or the tail is located with it. As explained previously, n 
(resp. r 2 ) cannot be located with the tail, this implies that, at time t mee t, r\ (resp. 7 * 2 ) is 
located with the headWalker. Therefore, whatever the direction pointed to by r\ (resp. 
?' 2 ) at time ti, if r\ and r 2 are never located on a same node (without any other robot on 
their node) between times ti and t n , it necessarily points to the right direction at time t n . 
Indeed, r\ (resp. r 2 ) points to the right direction at time t n either because it meets the 
headW alker that makes it point to the right direction or because at time ti it points to the 
right direction and it is never located with the headW alker and, by the movements of the 
robots described previously, it has not changed its direction between times tj and time t n . 
Hence, there is a contradiction with the fact that r\ and r 2 point to opposite directions at 
time t n . Therefore, r 1 and r 2 point to two opposite directions at time t n because they are 
located on a same node (without any other robot on their node) between times ti and t n . 

Consider the last time ti between times ti and t n at which r 1 and r 2 are located on a 
same node (without any other robot on their node). At time ti, since the two robots are 
located on a same node, by the movements of the robots described, during the Move phase 
of time ti one points to the right direction while the other one points to the left direction. 
By assumption, between times ti + 1 and t n , r 1 and ?’2 are not located on a same node. 
Moreover, as explained previously, between times ti + 1 and t n , neither r\ nor ?’2 can be 
located with the tail, otherwise Rule Term 2 is eventually executed. Besides, between 
times ti + 1 and t n the robot that points to the left direction during the Move phase of time 
ti cannot be located with the headWalker, otherwise, as noted previously, it points to the 
right direction at time t n . Similarly, it is not possible for the robot that points to the right 
direction during the Move phase of time ti to be located with the headW alker between 
times ti + 1 and t n , otherwise, by the movements of the robots described previously, this 
necessarily implies that either it is also located on the same node as the tail and therefore 
the liveness of G ew is solved or r\ and r 2 are on a same node and therefore the robot that 
points to the left direction during the Move phase of time ti is located with the headWalker. 
Therefore, from time f; + 1 to time t n , r\ and r 2 are isolated, hence, by the movements of 
the robots, they point to the same respective directions from the Move phase of time ti to 
time t n . 

Assume, without lost of generality, that this is r 1 that points to the right direction from 
the Move phase of time ti to time t n . Call v\ (resp. V 2 ) the node on which r\ (resp. r 2 ) is 
located at time t n . The explanations of the previous paragraph imply that v\ 7 ^ V 2 , and 
that, at time t n , the node where the headW alker and the tail are located is in Seg(y\,V 2 ). 
Therefore, since r\ (resp. 7 * 2 ) points to the right (resp. the left) direction at time t n , by 
the movements of the robots and since it exists only one eventual missing edge, this is not 
possible for these two robots to be eventually stuck on each of the extremities of the eventual 
missing edge. Hence, at least one succeeds to reach the node where the headW alker and 
the tail are located, making the liveness of G ew solved. 

Now we consider the case where there is no eventual missing edge. In this case, as indicated, 
it is not possible for both r\ and r 2 to join the tail otherwise Rule Term 2 is executed, which leads 
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to a contradiction with the assumption that GDG does not satisfy the liveness of G ew • Similarly, 
if one of the robots among ri or r 2 joins the tail, then, since there is no eventual missing edge, 
eventually the liveness of G ew is satisfied (Rule Terrri 2 is executed): either the robot joins the 
tail while the tail is located on the same node as the headWalker, or the robot joins the tail, 
executes Rule M4, and then the tail (that includes the robot that have executed Rule M4) join 
the headWalker. Hence, none of the robots among r\ and r 2 can join the tail. By the same 
arguments, it is not possible for the tail to join the headWalker while there is on its node at 
least one of the robots among n and r 2 . This implies, since there is no eventual missing edge, 
that the headWalker and the tail succeed to execute Rule Wi until their variables walkSteps 
reach n, and then they only execute Rule T 3 forever. Call n s the node on which the head¬ 
Walker and the tail execute Rule T 3 , and hence the node on which they stop to move forever. 
At the time t s where both the headWalker and the tail execute Rule T 3 , r\ and r 2 are such that 
kind ri £ {righter, potentialMin, dumbSearcher, awareSearcher} and kind r2 £ {dumbSear- 
cher, awareSearcher}. By the movements of the robots described previously, since there is no 
eventual missing edge, at least one of the robots among r\ and r 2 succeed to reach n s in finite time 
after time t s . Hence, in the case where there is no eventual missing edge, Rule Termi and/or 
Term 2 is executed. Therefore G ew is also solved by GDG in this case. □ 

By Lemmas 6.19 and 6.21, we can deduce the following theorem which proves the correctness 
of Phases W and T. 

Theorem 6.2. GDG satisfies G ew in COT rings under Mgathering- 

6.3.2 What about GDG executed in AC, 7ZS, B7ZS and ST rings? 

In the previous section, we prove that GDG solves G ew i n COT rings. In this section, we 
consider AC, 1Z£, B7Z£ and ST rings. For each of these classes of dynamic rings, we give the 
version of gathering GDG solves in it (refer to Table 6.1). When GDG solves a bounded version 
of the gathering problem, we give its time complexities in rounds. 

First, we consider the case of 1Z£ rings. In the following theorem, we prove that GDG solves 
Gu in 1Z£ rings. 

Theorem 6.3. GDG satisfies G e inlZ£ rings under M.gathering- 

Proof. By Theorem 6 . 2 , GDG solves G ew i n COT rings, therefore it solves the safety and the 
liveness of G ew i n COT rings. Since 7Z£ C COT, GDG also solves the safety and the liveness of 
G ew in 7Z£ rings. This implies that all robots that terminate their execution terminate it on the 
same node and it exists a time at which at least 7Z — 1 robots terminate their execution. Call t 
the first time at which at least 7Z — 1 robots terminate their execution. 

By contradiction, assume that GDG does not solve Ge in 1Z£ rings, this implies that it exists 
a robot r that never terminates its execution. 

Call towerTermination the 1Z — 1 robots that, at time t, are located on a same node and 
are terminated. While executing GDG, the only way for a robot to terminate its execution is 
to execute either Rule Termi or Rule Term 2 - By Lemma 6.18, for a towerTermination to be 
formed at time t, Rule Term 2 has to be executed at this time. 

(*) By the predicate of Rule Term 2 , r m in belongs to the towerTermination. By Lemma 6.18, 
all the robots that are located on the same node as r min at time t belong to the towerTermina- 
tion. 

Call w the node where the towerTermination is located at time t. 

Note that r cannot be located on node w after time t included, otherwise it executes Rule 
Termi an d the lemma is proved. 

Since r m i n belongs to the towerTermination, and since by Corollary 6.4, only r m i n can 
be minWaitingWalker or a minTailWalker, r is neither minWaitingWalker nor minTail- 
Walker. 
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At time t, r cannot be a tailWalker. Indeed, to become a tailWalker, a robot must ei¬ 
ther execute Rule Ki or Rule M4. To execute Rule Ki a robot must be a waitingWalker. By 
Lemma 6.7, all waitingW alker are located on the same node as the minWaitingWalker. More¬ 
over, when a waitingW alker executes Rule Ki, by the predicate AllButTwoW aitingW alker (), 
the minWaitingWalker also executes this rule becoming a minT ailW alker. Then by the rules of 
GDG, the robot that becomes tailW alker while executing Rule Ki and the minT ailWalker ex¬ 
ecute the same movements (refer to Rules Wi and T3), and therefore are always on a same node. 
Besides, to execute Rule M4 a robot must be located on the same node as the minWaiting- 
W alker (refer to the predicate NotW alkerWithTailW alker (r')). Then, thanks to the function 
BecomeTailWalker(_) and by the rules of GDG, the robot that becomes tailWalker while 
executing Rule M4 cannot be on a node different from the one where the minT ailW alker is 
located (refer to Rules Wi and T3). Therefore, by (*), r cannot be a tailWalker at time t, 
otherwise, at time t, it is on the same node as the minTailW alker (thus, by Corollary 6.4, it is 
on the same node as r min ) and hence it terminates its execution. 

At time t, r cannot be a waitingW alker robot. Indeed by the rules of GDG and the previous 
remarks, it cannot exist waitingW alker if there is no minWaitingWalker in the execution, 
and by Lemma 6.7 all the waitingW alker and minW aitingW alker are located on a same node. 
Therefore, by (*), r cannot be a waitingW alker at time t, otherwise, at time t, it is on the same 
node as the minW aitingW alker (thus, by Corollary 6.4, it is on the same node as r mtn ) and 
hence it terminates its execution. 

Therefore, at time t, r can be either a righter , a potential Min , a dumbSearcher , an aware- 
Searcher, a headWalker or a leftWalker robot. 

As long as r is not on node w, it is isolated. 

An isolated righter or an isolated potentialMin only executes Rule Ms- While executing 
this rule, a robot points to the right direction and stays a righter or a potentialMin. Since all 
the edges are infinitely often present, such a robot is infinitely often able to move in the right 
direction until reaching the node w. 

An isolated dumbSearcher or an isolated awareSearcher only executes Rule Mu. While 
executing this rule, an isolated robot stays a dumbSearcher or an awareSearcher , and points to 
the direction it points to during the previous Move phase. By Lemma 6.20, this direction cannot 
be equal to _L. Therefore, an isolated dumbSearcher or an isolated awareSearcher always points 
to the same direction d (either right or left). Since all the edges are infinitely often present, such 
a robot is infinitely often able to move in the direction d until reaching the node w. 

Now assume that, at time t, r is a leftWalker. A leftWalker only executes Rule Tj. While 
executing this rule, a robot points to the left direction and stays a leftWalker. Since all the 
edges are infinitely often present, such a robot is infinitely often able to move in the left direction 
until reaching the node w. 

Now assume that, at time t,r is a headW alker. A headW alker can execute either Rule T2 or 
Rule T3 or Rule Wp While executing Rule T2, a headW alker becomes a leftWalker, then, by 
the previous paragraph, r reaches the node w in finite time. Consider now the cases where, at 
time t, r executes either Rule T3 or Rule Wp In these cases, after time t, it necessarily exists a 
time at which r executes Rule T2. Assume, by contradiction, that this is not true. The only way 
for a robot to become a headW alker is to execute Rule Ki. Rule Ki is executed when 7Z — 2 
robots are located on a same node. While executing this rule, a robot sets its variable walker- 
Mate with the identifiers of the robots that are located on its node. Only Rule Ki permits a 
robot to update its variable walkerMate. Note that, since 1Z — 2 > 2, the variable walkerMate 
of r, after time t, contains at least one identifier i different from the identifier of r. The robot 
of identifier i necessarily belongs to the towerTermination , since only r does not terminate. (1) 
Hence, at time t, the robot of identifier i is terminated on node w, thus it does not move, and 
therefore, after time t, r is never on the same node as i. (2) All the edges are infinitely often 
present. While executing Rule T 3 at time t, r points to the _L direction and does not update its 
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other variables. (3) Hence, by the rules of GDG, since r cannot execute Rule T 2 , after time t, r 
can only execute Rule T 3 , and therefore only points to the _L direction. Hence, necessarily by (1), 
(2) and (3), this implies that, after time t, it exists a time at which the predicate HeadWalker- 
WithoutW alker MateQ is true, thus at this time Rule T 2 is executed. Similarly, if at time t, r 
executes Rule Wi, since r can never be located on the same node as i. while executing Rule Wi, 
it points to the _L direction and does not update its other variables. (4) Hence, by the rules of 
GDG, since r cannot execute Rule T 2 , after time t, r can only execute Rule Wi, and therefore 
always points to the _L direction. Thus, by (1), (2) and (4), necessarily, after time t, it exists a 
time at which the predicate HeadWalkerWithoutW alker Mate( ) is true, hence at this time Rule 
T 2 is executed. Therefore, even in the cases where, at time t, r executes either Rule T 3 or Rule 
Wi, it exists a time greater than t at which r becomes a leftWalker and hence, by the previous 
paragraph, r succeeds to reach the node w in finite time. 

Therefore whatever the kind of robot r is, it is always able to reach the node w. Once r reaches 
the node w it executes Rule Termi making G^; solved. □ 

Now, we consider the case of AC rings. In the following theorem, we prove that GDG solves 
G w in AC rings. 

Theorem 6.4. GDG satisfies Gw in AC rings under M.gathering in 0(id rmin *n 2 + TZ*n) rounds. 

Proof. By Theorem 6.2, GDG solves G ew in COT rings, since AC C COT , this implies that 
GDG also solves G ew in AC rings. Therefore, to prove that GDG solves Gw in AC rings, it stays 
to prove that each phase of GDG is bounded. 

Phase M: By Corollary 6.4, only r mm becomes min in finite time. By the rules of GDG, when 
r m in becomes min , it is first minWaitingWalker before being minTailWalker (since only 
a minW aitingW alker can become a minT ailW alker while executing Rule Ki). There¬ 
fore, since only Rule Mi permits a robot to become minWaitingWalker , by the predicate 
MinDiscoveryQ of this rule, r m j n becomes min either because it moves during 4 *n*id rmin 
steps in the right direction or because it meets a robot that permits it to deduce that it is 
min. In this last case, note that, either r mm is potentialMin, or r nnn meets a potential- 
Min or a dumb Searcher or a robot whose variable idMin is different from — 1 . Therefore, 
in this last case, either r m i n possesses a variable idPotentialMin different from —1, or r m ,; n 
meets a robot r such that idPotentialMin r is different from —1 (since a potentialMin and 
a dumb Searcher have their variable idPotentialMin different from —1 (Rule Me) and 
since, while executing GDG, each time the variable idMin of a robot is set with a variable 
different from — 1 , this is also the case for its variable idPotentialMin). 

Taking back the arguments used in the proof of Lemma 6.5, let us consider the following 
cases. 

Case 1.1: Rule Mg is never executed. 

By the rules of GDG, this implies that, before the time when r m j n is ruin, there are 
only righter in the execution. First, this implies that r mm becomes min because it 
moves during 4 *n* id Trnin steps in the right direction (since righter robots have their 
variables idPotentialMin equal to —1). Second, in this context, as long as r m i n is not 
min , all the righter always point to the right direction (Rule Ms). This implies that, 
as long as r min is not min , each time a robot wants to move in the right direction it 
can be stuck during at most n rounds, otherwise, since in an AC ring at most one edge 
can be missing at each instant time, Rule Mg is executed. Therefore in case 1.1 r m i n 
becomes min in at most 4 * id r . * n* n rounds. 

Now let consider the case where Rule Mg is executed at a time t. In the following, we 
consider the execution from time t. After time t, while it is not yet min, if r mm is stuck 
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more than 4 * n consecutive rounds on a same node then it becomes min. We prove this 

considering the two following cases. In each of these cases, we assume that r m in is not yet 

min and that it is stuck more than n rounds on a same node. 

Case 1.2: Rule Me is executed but r m j n is not among the 1Z — 1 righter robots 
that execute it. 

Taking back the arguments of the proof of Lemma 6.5, we know that Rule Mg can be 
executed only once, and that the robots that execute this rule can never be righter any¬ 
more. Moreover, since r m i n does not execute Rule Me, since, by Corollary 6.4, r mm 
necessarily becomes min , since, by Lemma 6.9, only righter and potentialMin can be 
min, and since only Rule Me permits robots to become potentialMin, before becom¬ 
ing min, r m i n is a righter. By the proof of Lemma 6.5, as long as r m i n is not min it 
cannot exist aw are Searcher. Hence, by the rules of GDG, as long as r m i n is not min, 
there are only one righter, one potentialMin and 1Z — 2 dumhSearcher in the execu¬ 
tion. Therefore, by the rules of GDG, the potentialMin is potentialMin at least until 
^min becomes min. Hence, the potentialMin executes Rule Mg and thus points to the 
right direction at least until r mm becomes min. We have assumed that, while it is not 
yet min, r m i n is stuck more than 4*n consecutive rounds on a same node. Since r m i n is 
a righter before being min, it is stuck because the adjacent right edge to its position 
is missing (Rule Ms). Therefore, since in an AC ring of size n at least n — 1 edges 
are present at each instant time, either the potentialMin (or a dumbSearcher ) meets 
r m i n in at most n rounds. When r m i n meets a potentialMin (or a dumbSearcher ), it 
becomes min by definition of the predicate MinDiscovery{ ) in Rule Mi. Therefore, 
if it is stuck more than 4 * n rounds, r m j n becomes min in at most n rounds. 

Case 1.3: Rule Mg is executed and r m i n is among the 1Z — 1 righter robots that 
execute it. 

In this case, by Rule Me, r m i n becomes potentialMin. By Observations 6.2 and 
6.1, by Corollary 6.4 and by Lemma 6.9 r m j n is potentialMin until it becomes min. 
Therefore, r m i n , while it is not yet min, can be stuck only because the adjacent right 
edge to its position is missing (Rule Mg). 

First, consider that at the time when r m i n , as a potentialMin, is stuck more than 4 * n 
rounds, there does not exist righter in the execution. By Observation 6.2, there is no 
more righter in the execution. However, at the time when Rule Mg is executed, the 
robot r that is not among the robots that execute this rule is a righter. Therefore, 
necessarily r, as a righter, meets at least one dumbSearcher at a time t!. Indeed, 
it cannot meet the potentialMin, otherwise r m i n is min (Rule Mi), and thus it is 
not anymore potentialMin at the time at which it is stuck. Moreover, r cannot be 
isolated forever after time t, otherwise it stays a righter (Rule Mg). Hence, at time 
t', r becomes an aw are Searcher (Rule M7). Consider an awareSearcher r a of the 
execution. By Lemma 6.4, r a cannot point to the _L direction. Moreover, by the 
rules of GDG, as long as there is no min, an awareSearcher executes the function 
SearchQ (rule Mu). Besides, by the proof of Lemma 6.5 if a robot is not isolated 
and executes the function SEARCHQ, then all the robots of its node are or become 
awareSearcher and execute the function SearchQ. While executing the function 
SearchQ, an isolated robot does not change its direction. When a robot executes 
the function SearchQ while there are multiple robots on its node, if it possesses 
the maximum identifier among the robots of its node, it points to the left direction, 
otherwise it points to the right direction. In an AC ring of size n, at least n — 1 edges 
are present at each instant time. Therefore, if r a points to the right direction, either 
it, as an awareSearcher or a robot that is or becomes an awareSearcher is located, 
in at most n rounds, on the node where r mm , as a potentialMin, is stuck. In the 
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case where r a points to the left direction then, by the same arguments, in at most 
4 * n rounds an aware Searcher is located on the node where r m i n , as a potential- 
Min, is stuck. Indeed, at most n rounds are needed for an aw are Searcher to reach 
the extremity of the missing edge where r m i n is not located. Then, at most 2 *n other 
rounds are needed for a dumbSearcher (execution of the function SearchQ, rule 
M u ) or an awareSearcher to reach also this node. These 2 * n rounds are especially 
needed for a dumbSearcher that may take n rounds (pointing to the left direction) 
to reach the node where r m) ; n is stuck and then again n rounds (pointing to the right 
direction) to reach the other extremity of the missing edge. From this time there is in 
the execution an awareSearcher that points to the right direction. Finally, at most 
n supplementary rounds are needed for an awareSearcher to reach the node where 
rmin , as a potentialMin , is stuck. Note that 1Z > 4, and there are TZ — 1 dumb¬ 
Searcher / awareSearcher in the execution as long as r m j n is not min. Therefore, 
the previous scenario can effectively happen. When r mm meets an awareSearcher, it 
becomes min by definition of the predicate MinDiscovery( ) of rule Mi. Therefore, 
r m i n becomes min in at most 4 * n rounds if it is stuck more than 4 * n rounds. 
Second, consider that at the time when r m i n , as a potentialMin, is stuck more than 
4 * n rounds, there exists a righter. In this case, since an isolated righter points 
to the right direction (Rule Ms), and by the arguments of the previous paragraph, 
either a righter or a robot that is an awareSearcher or that becomes an awareSear¬ 
cher (Rules M7, Mg or M 10 ) meets r m j /n in at most n rounds. When r m i n meets a 
righter or an awareSearcher, it becomes min by definition of the predicate Min- 
Discoveryf) of Rule Mi. Therefore, r m i n becomes min in at most n rounds if it is 
stuck more than 4 * n rounds. 

Now, we give the worst number of rounds needed for r mtn to become min, in the case where 
there exists a time t at which Rule Mg is executed. By Case 1.1, before time t, r m in, while 
it is not yet min, can be stuck at most n rounds each time it moves from one step in the 
right direction. Similarly, by the two previous cases (Case 1.2 and 1.3), after time t, r m i n , 
while it is not yet min, can be stuck at most 4 * n rounds each time it moves from one 
step in the right direction. Let nb be the number of steps in the right direction moved by 
r m in before time t. As proved previously, r m i n is either a righter or a potentialMin before 
being min. By Lemma 6.2, this implies that before being min, r m i n always points to 
the right direction. Therefore, by the predicate MinDiscoveryf) of Rule Mi, in at most 
nb * n + ((4 * id rmin * n) — nb) *4 * n rounds, r mm becomes min because it moves during 
4 *id rmin * n steps in the right direction. This function is maximal when nb = 0, therefore in 
at most 16 *id rmin *n 2 rounds r m i n becomes min because it moves during 4*id rmin *n steps 
in the right direction. Now consider the case where r mm becomes min because it meets a 
robot that permits it to deduce that it is min. Once r m i n is stuck more than 4* n rounds 
after time t, we have seen that it becomes min. Since we consider the worst case such that 
r m in does not become min because it moves during 4 * id rmin = 1 = n steps in the right direction, 
this implies that in at most (4* id rmin *n — l)*4*n rounds r mm becomes min. Therefore, 
whatever the situation, Phase M is bounded. 

Moreover, by Case 1.1 and the previous paragraph, we can conclude that Phase M is in 
0(id rmin * n 2 ) rounds. 

Now we consider Phase K of GDG. In this phase r nnn is min and waits for a towerMinCon- 
figuration to be formed. We take back the arguments used in the proofs of Lemmas 6.15 
and 6.16 to prove that this phase is bounded. 

Phase K: Case 2.1: There is a potentialMin in the execution. 

For this case we take back the arguments of the proof of Lemma 6.15. 
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If before being min, r m i n is a righter, then all the robots that are not located on node 
u are potentialMin, dumb Searcher, and aw are Searcher. As long as it is not on node 
u, a potentialMin either executes Rule Mg, or it becomes an awareSearcher (Rule 
M 5 ). While executing Rule Mg, a potentialMin stays a potentialMin and has the 
same behavior as if it was executing the function SearchQ. Moreover, as long as they 
are not on node u, dumbSearcher and awareSearcher robots stay either dumbSear- 
cher or awareSearcher and execute the function SearchQ. Therefore, by definition 
of the function SearchQ (refer to Phase M case 1.3 of this proof) and by Lemma 6.13, 
at most 3 * n rounds are needed (in AC rings) for a robot r such that kind r G { po¬ 
tentialMin, dumbSearcher, awareSearcher} to be located on node u. Indeed, these 
3 * n rounds are needed especially when a potentialMin, dumbSearcher or aware¬ 
Searcher moves in one direction during n steps and then is stuck on the adjacent 
node of u, then n steps are needed for a robot of this kind to be also located on this 
node and thus to point to the opposite direction, then in at most n additional steps a 
robot of this kind is located on u. By Rule K 3 , this implies that at most 3 * n rounds 
are necessary for a supplementary waitingWalker to be located on node u. Therefore, 
at most (JZ — 3) * 3 * n rounds are needed for a tower MinCon figuration to be formed. 
Now consider the case where before being min, r m i n is a potentialMin. 

In this case among the robots that are not on node u, there are dumbSearcher, aware¬ 
Searcher and at most one righter. 

For all the cases of Case 2.1 of the proof of Lemma 6.15, at most {1Z — 4) * 3 *n rounds 
are needed for TZ — 4 waitingWalker to be located on u (for the same reasons as the 
one explained in the previous paragraph). Then among the robots that are not on 
node u, it exists at most one righter, and 2 robots that are either dumbSearcher or 
awareSearcher. At most n rounds are needed for the righter to be stuck on the node 
called v in the proof of Lemma 6.15, and then at most n rounds are needed for a dumb¬ 
Searcher or an aw are Searcher to be also located on node v (and thus, by Rule M 7 , 
for all the robots that are not on node u to be either dumbSearcher or awareSear¬ 
cher) , and then at most n additional rounds are needed for one of the robot to reach 
node u. Therefore, for all the cases of Case 2.1 of the proof of Lemma 6.15, at most 
(7 Z — 4)*3*n + 3*n rounds are needed for a tower M inConfiguration to be formed. 
If we consider Case 2.2 of the proof of Lemma 6.15, similarly as in the previous case, 
at most (7 Z — 4)*3*?r + 3*n rounds are needed for Rule Term 2 to be executed. 

Case 2.2: There is no potentialMin in the execution. 

For this case we take back the arguments of the proof of Lemma 6.16. 

Just after r m i n becomes min, it takes at most n * n rounds for a robot r to join the 
node where r nun is located. Indeed, as long as no robot is on node u with r mtn , as a 
minWaitingWalker, all the robots except r mm are righter. By the same arguments 
as the one used in Phase M Case 1.1 of this proof, a righter cannot be stuck more than 
n rounds on the same node, otherwise Rule Mg is executed, which is a contradiction 
with the fact that there is no potentialMin. Moreover, a righter can move from at 
most n steps in the right direction to reach u. 

Once r is on node u an adjacent right edge to u is present in at most n rounds, other¬ 
wise Rule Termi is executed. Therefore, once r is on node u, in at most n rounds it 
becomes an awareSearcher. From this time, either it is possible for all the righter to 
become awareSearcher or it exists at least one righter that is stuck on node u. In the 
first case at most 2 * n rounds are needed for all the righter to become awareSear¬ 
cher (either because an awareSearcher meets them, or because they are located on 
u such that there is an adjacent right edge to u). By the arguments above, we know 
that if all the robots that are not located on node u are awareSearcher, and if there 
are more than 3 such robots, then in a most 3 * n rounds one robot of this kind reaches 
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node u. Therefore, for TZ — 3 waiting Walker to be located on node u, with r mm , at 
most {7Z — 3)*3*n supplementary rounds are needed. In the second case, at most 2*n 
rounds are needed for some of the righter to reach node u (and to be stuck on this 
node). Since the robots that are not on node u are awareSearcher and since at least 
one righter is stuck on node u, by the same arguments as above, at most (TZ — 3)*3 *n 
additional rounds are needed for Rule Term 2 to be executed. 

Therefore, in this case, at most n*n+n+2*n+ (TZ — 3) * 3 * n rounds are needed 
for either Phase K to be achieved or Rule Terrri 2 to be executed. 

Therefore Phase K is bounded. Moreover, by the two previous cases, we can conclude that 
Phase K is in 0(TZ * n + n 2 ) rounds. 

Now we consider Phase W of GDG. In this purpose we take back the arguments used in the 
proof of Lemma 6.21. 

Phase W: Here we consider the worst execution in terms of times. Therefore, we consider that 
Rules Termi and Term 2 are executing at the very last moment. The robots r\ and ?’2 
that are not involved in T at time ttower are such that kind ri G { righter , potentialMin, 
dumbS earcher , aw are Searcher} and kind r2 G {dumb Searcher, awareSearcher}. There¬ 
fore, as explained previously, each time the headWalker, or the minTailWalker / tail- 
Walker robots move from one step in the right direction, they can be stuck at most during 
3 *n rounds; otherwise either Rule Termi or Rule Terrri 2 is executed. Indeed, this is espe¬ 
cially the case when the headWalker and the minTailW alker / tailW alker are stuck on 
the same node. In fact, it takes at most n rounds for r\ to be stuck on the other extremity 
the missing edge. At most n supplementary rounds are needed for r 2 to reach the node 
where r\ is stuck (and therefore for one robot to change its direction), and then n other 
rounds are needed for one of these robots to reach the node where the headWalker and the 
minTailW alker / tailWalker are stuck (and thus for Rule Terrri 2 to be executed). There¬ 
fore, Phase W is achieved in at most 2 * n * (3 * n) rounds since the headWalker and the 
minTailW alker / tailW alker robots have to move alternatively during n steps to complete 
Phase W. In other words, Phase W is bounded and is in 0(n 2 ) rounds. 

Now we consider Phase T of GDG. In this purpose we take back the arguments used in the 
proof of Lemma 6.21. 

phase T: Using similar arguments as the one used in Phase W, once the headWalker and the 
minTailW alker / tailW alker stop to move forever, if they are located on a same node, 
at most 3 * n rounds are necessary for Rule Term 2 to be executed. In the case where 
the headWalker and the minTailW alker / tailW alker stop to move forever, if they are 
located on different nodes, at most 2 * n + 2 * n rounds are necessary for Rule Terrri 2 to 
be executed. Indeed, at most 2 * n rounds are necessary for each of the two robots that are 
not involved in T at time tt OW er to be located on the node where the minTailW alker /tail- 
Walker is located. This is true whatever the interactions between n and r 2 and whatever 
the interactions between n (resp. r^) and the headW alker since in an AC ring there is 
at most one edge missing at each instant time (and in this precise case the missing edge 
is between the node where the headW alker is located and the node where the minTail- 
W alker / tailW alker are located). Therefore, Phase T is bounded and is in 0(n ) rounds. 

In conclusion each of the four phases of algorithm GDG are bounded when executed in an 
AC ring, therefore GDG solves G w i n AC rings. Moreover, GDG solves G w i n AC rings in 
0{id rmin * n 2 + TZ* n) rounds. □ 

Now, we consider the case of BTZS rings. We prove, in Theorem 6.5, that GDG satisfies G in 
BTZS rings. To prove this, we first need to prove the following lemma that it useful to bound 
Phase K of GDG in BTZS rings. We prove the following lemma using the arguments of the proof 
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of Lemma 6.14 and the fact that in a BIZS ring each edge appears at least once every 5 units of 
time. 

Lemma 6.22. If the ring is a BIZS ring and if there is no tow erM inCon figuration in the 
execution but there exists at a time t at least 3 robots such that they are either potential Alin, 
dumbSearcher or aw are Searcher, then at least a potential Min, a dumbSearcher or an aware- 
Searcher reaches the node u between time t and time t + n* 5 included, with <5 > 1. 

Theorem 6.5. GDG satisfies G in BUS rings under M ga thering in 0(n*5*(id rmin +IZ)) rounds. 

Proof By Lemma 6.3, GDG solves G^; in IZS rings. Therefore, since BIZS C IZS, then GDG also 
solves Ge in BIZS rings. We want to prove that GDG solves G in BIZS rings. Therefore, we have 
to prove that each phase of the algorithm is bounded. 

Phase M: By Corollary 6.4, we know that only r m j n becomes min in finite time. By Lemma 6.9, 
before being min, r m in is either a righter or & potential Alin robot. By Lemma 6.2, if, at a 
time t, a robot is a righter or a potentialMin robot, then it points to the right direction 
from the beginning of the execution until the Look phase of time t. Since initially all the 
robots are righter, and since, by the rules of GDG, only righter can become potential- 
Alin (refer to Rule Me), then by Observations 6.2 and 6.1, a robot that is a righter (resp. 
potentialMin) is a righter (resp. is either a righter or a potential Alin) since the beginning 
of the execution. Besides, each time r m ,; n , as a righter or as a potential Alin, crosses an edge 
in the right direction, it increases its variable rightSteps of one (refer to Rules Ms and Mg). 
Therefore, since each edge of the footprint of a BIZS ring is present at least once every 5 
units of time, by definition of min and of the predicate MinDiscoveryi) of Rule Mi, r mm 
becomes min in at most 4 * n * id rmin * 5 rounds. Hence, Phase M is bounded and is in 
0{id rmin *n* S). 

Phase K: Now, consider the execution when r mtn just becomes min. Therefore, we consider 
the execution once r m j n is minWaitingWalker. By Corollary 6.5, we know that in fi¬ 
nite time a tower AlinC on figuration is formed. By Lemma 6 . 6 , there is only one tower- 
AlinC on figuration in the whole execution. Therefore, before a tower AlinC on figura¬ 
tion is formed, by the rules of GDG and since initially all the robots are righter, there are 
only righter, potential Alin, dumbSearcher, aw are Searcher, minWaitingWalker and 
w aitingWalker robots. By Lemma 6.7, we know that all the minW aitingW alker and 
waitingWalker robots are located on a same node and do not move. By Rule K3, if a 
potentialMin, a dumbSearcher or an awareSearcher is located on the same node as a 
minW aitingW alker, it becomes w aitingWalker (*). If there is no more righter robot in 
the execution, we use Lemma 6.22 and (*) multiple times to prove that it takes at most 
n * 5 * (IZ — 3) rounds for a tower AlinC on figuration to be formed. To prove that Phase 
K is bounded, we hence have to prove that the number of rounds that are necessary to stop 
to have righter in the execution is bounded. 

If a righter is located on the same node as the minWaitingWalker while there is an 
adjacent right edge to its location, then by Rule K4, the righter becomes an awareSear¬ 
cher and moves on the right. If a righter is located only with IZ — 2 other righter, they 
all execute Rule Mg, hence one becomes potentialMin while the others become dumb¬ 
Searcher. If a righter is located either with a dumbSearcher or with an awareSear¬ 
cher, then it becomes an aw are Searcher (Rule M 7 ). Note that, by Lemma 6.10, since we 
consider the execution once r m i n is min, it cannot exist a righter and a potentialMin in 
the execution. Therefore, a righter cannot meet a potentialMin. In all the other cases, 
(a righter that is isolated, a righter that is only with others righter on its node such that 
\NodeMate()\ < IZ — 2, and a righter that is located on the same node as the minWaiting- 
Walker while there is no adjacent right edge to its location) a righter stays a righter and 
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points to the right direction (Rule Ms). Therefore, by Observation 6.2 and since each edge 
of the footprint of a BTZS ring is present at least once every S units of time, it takes at 
most n* 5 rounds in order to stop having righter robots in the execution. Indeed, even if 
a righter does not execute Rule M 7 or Rule Mg, at most n * 5 rounds are needed for it to 
be located on the node where the minWaitingWalker is located while there is an adjacent 
right edge to its position. Hence, Phase K is bounded and is in 0(n *71* 5). 

Once a towerMinConfiguration is present in the execution, the robots forming this tower- 
MinC on figuration execute Rule Ki. While executing this rule, the robot r with the max¬ 
imum identifier among the robots involved in this towerMinConfiguration becomes head- 
Walker while the minWaitingWalker becomes minTailWalker and the other robots involved 
in this towerMinConfiguration become tailWalker. Note that, by Corollary 6.4, only r rnin can 
be min , and therefore, since r m j n is the robot with the minimum identifier among all the robots 
of the system and since at least 2 robots are involved in a tower MinC on figuration, r m i n cannot 
become headWalker. By Lemma 6.6 and by the rules of GDG, only r can be headWalker during 
the execution. 

There is no rule in GDG permitting a tailWalker or a minTailW alker robot to become 
another kind of robot. A headWalker can become a leftWalker. Let then consider the two 
following cases. 

Case 1: r is a headWalker during the whole execution. 

Phase W: A headW alker can execute Rules T 2 , T 3 and Wi. Since r does not become a 
leftWalker, it cannot execute Rule T 2 . Moreover, since we consider the worst-case 
execution in terms of time, this implies that r is able to execute Rule Wi entirely. 
This means that r is able to execute Rule Wi until its variable walkSteps reaches the 
value n. In other words, r is able to execute Rule Wj until it executes Rule T 3 . 

In this case, the tailW alker and minTailW alker are also able to execute Rule Wj en¬ 
tirely. Indeed, if, at a time t', while executing Rule Wj or Rule T 3 , the headW alker is 
waiting on its node for the tailWalker and the minTailW alker to join it while there 
is an adjacent left edge to its position, and if at time t' + 1 the tailWalker and the 
minTailW alker have not joined it on its node, this necessarily implies that they stop 
their execution, otherwise by Rule Wi they would have joined it. Moreover, if such an 
event happens, r executes Rule Ti and therefore becomes a leftWalker, which leads 
to a contradiction. 

If the headW alker and the minTailW alker / tailW alker execute Rule Wi entirely, 
this implies that they move alternatively in the right direction during n steps. Since 
each edge of the footprint of a BTZS ring is present at least once every 5 units of time, 
this takes at most 2 * n * 5 rounds. Phase W being composed only of the execution of 
Rule Wi, this phase is bounded. 

Phase T: Call t v the time at which the headW alker and minTailW alker / tailWalker robots 
finish to execute Rule Wi entirely. Since the headW alker and minTailW alker / tail¬ 
Walker start the execution of Rule Wi on the same node, at time t v , they are on the 
same node v. 

Call n and ?’2 the two robots that are not involved in the towerMinConfiguration at 
time tt ower . 

If at time t v , n and r 2 are on node v, then Rule Termi is executed at time t v . In this 
case, by Lemma 6.18, Phase T last 0 round, hence it is bounded. 

If at time t v , only one robot among r\ and r 2 is located on node v, then Rule Term 2 is 
executed at time t v . Hence, by Lemma 6.18, TZ — 2 robots are terminated on node v at 
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time t v . By Lemma 6.17, at time U OW er, r \ and r 2 are such that kind ri G { righter, po- 
tentialMin, aw are Searcher, dumbSearcher} and kind r2 G {aw are Searcher, dumb- 
Searcher}. By the movements of the robots given in the proof of Lemma 6.21, and 
since each edge of the footprint of a B1Z£ ring is present at least once every 5 units of 
time, it takes at most n * 5 rounds for the last robot to reach node v. Therefore, it 
takes at most n* 5 rounds for Rule Termi to be executed, and thus, by Lemma 6.18, 
for all the robots to be terminated on node v. Hence, in this case Phase T last at most 
n * 5 rounds, therefore it is bounded. 

Now, consider that at time t v neither ri nor r 2 is located on node v. In this case, at time 
t v , the headWalker and minTailWalker/tailWalker execute Rule T 3 . While exe¬ 
cuting Rule T 3 , the headWalker (resp. minT ailW alker / tailW alker) stays a head- 
W alker (resp. minTailW alker / tailW alker) and points to the _L direction. Then, by 
the rules of GDG, they can only execute Rule T 3 until they terminate. Therefore, they 
remain on node v from time t v until the end of their execution. Moreover, as noted pre¬ 
viously, by Lemma 6.17, at time Uower, r \ and ?’2 are such that kind ri G {righter, po- 
tentialMin, aw are Searcher, dumbSearcher} and kind T2 G {aw are Searcher, dumb¬ 
Searcher}. By the movements of the robots given in the proof of Lemma 6.21, since 
each edge of the footprint of a B1Z£ ring is present at least once every 5 units of time, 
it takes at most 2 * n * 6 rounds for n and r 2 to both reach the node v (in case r\ 
and ?’2 meet on an adjacent node of v after at most n* 5 rounds of movements in the 
same direction). In the case the two robots reach node v at the same time, then Rule 
Termi is executed, hence, by Lemma 6.18, all the robots terminate at that time. In 
the case the two robots do not reach node v at the same time, then the first one that 
reaches v permits the execution of Rule Term 2 (hence, by Lemma 6.18, permits the 
termination of 77, — 2 robots on node v) and the second that reaches v permits the 
execution of Rule Termi. Hence, Phase T last at most 2 * n* 5 rounds, therefore it is 
bounded. 

Case 2: It exists a time at which r is a leftWalker. 

By the explanations given in the Case 1, Phase W, at most 2 * n * 6 rounds are needed for 
r to become leftWalker and for the 77 — 2 other robots to terminate their execution on a 
node v. 

By the rules of GDG, a leftWalker only executes Rule Ti. While executing this rule, a 
robot points to the left direction and stays a leftWalker. Since each edge of the footprint 
of a B1Z£ ring is present at least once every 5 units of time, such a robot reaches the node v 
in at most n* 5 rounds. Hence, in this case, Phases W and T take at most 3 * n* 5 rounds, 
hence they are bounded. 

By the two previous cases, phase W and Phase T take 0(n * 5) rounds. 

Whatever the B1Z£ ring considered, each phase of GDG is bounded, therefore, GDG solves 
G in B1Z£ rings. Moreover, GDG solves G in B1Z£ rings in 0(n * 5 * ( id rmin + 77.)) rounds. □ 

Now, we consider the case of ST rings. We know that ST rings are B1Z£ rings such that 
5=1, hence, by Theorem 6.5, we can deduce the following corollary. 

Corollary 6.6. GDG satisfies G in ST rings under M ga thering 0[n * ( id Trnin + 77.)) rounds. 

From Theorems 6.2, 6.3, 6.4, 6.5, and Corollary 6 . 6 , we can conclude the following theorem. 

Theorem 6.6. GDG is a gracefully degrading algorithm with respect to ST, B1Z£, 1Z£, AC, and 
COT, for the gathering problem under M.gathering- 
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6.4 Summary 

In this chapter, we apply for the first time (in an explicit way) the gracefully degrading 
approach to robot networks. This approach consists in circumventing impossibility results in 
highly dynamic systems by providing algorithms that adapt themselves to the dynamics of the 
graphs: they solve the problem under weak classes of dynamic graphs (where the connectivity 
assumptions are strong) and only guarantee that some weaker but related problems are satisfied 
whenever the dynamics increase and make the original problem impossible to solve. 

Focusing on the classical problem of gathering a squad of autonomous robots, we introduce 
a set of weaker variants of this problem that preserve its safety (in the spirit of the indulgent 
approach that shares the same underlying idea). Indeed, we define G e (where all the robots 
terminate their execution on the same node of the graph in finite time), Gw (in which all robots 
but (at most) one terminate their execution on the same node of the graph in finite and bounded 
time) and G ew (where all robots but (at most) one terminate their execution on the same node 
of the graph in finite time) that derive from G (the original version of the gathering problem 
in which all the robots terminate their execution on the same node of the graph in finite and 
bounded time). Motivated by a set of impossibility results, we propose a gracefully degrading 
gathering algorithm solving G ew i n COT rings, Gw in AC rings, G^; in 1ZS rings and G in 
B1ZS and ST rings (refer to Table 6.1 for a summary of our results). 
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Conclusion on Graceful 

Degradation 


Gracefully degrading algorithms may be executed in multiple dynamic environments and in 
environments in which the dynamics change with time. They are used to circumvent impossibility 
results in dynamic systems: they solve the problem studied in some dynamic environments in 
which it is solvable and degrade it when the dynamics of the environments increase and make 
it impossible. The goal of this part was to extend the gracefully degrading approach to robot 
networks evolving in dynamic graphs. On this purpose, we considered the gathering problem in 
dynamic rings. 

In this part, we first have presented, in Chapter 5, the state of the art about the gracefully 
degrading approach as well as the state of the art concerning the gathering problem in dynamic 
graphs. The gathering problem being impossible in AC rings [122] (also refer to Section 6.1), it 
is a good case study for the conception of a gracefully degrading algorithm. However, none of 
the gathering (or rendezvous) algorithms in dynamic graphs of the state of the art is explicitly 
gracefully degrading. Moreover, even when being (without telling it) gracefully degrading, none 
of the gathering (or rendezvous) algorithms of the state of the art is gracefully degrading with 
respect to ST, B1Z£, 1Z£, AC, and COT , preserves the safety of the gathering problem, and 
imposes that a non-zero number of robots terminate their execution. 

Therefore, to fill the lack of the state of the art, we have presented, in Chapter 6, the first 
gracefully degrading gathering algorithm with respect to ST, B1Z£, 1Z£, AC, and COT, that 
preserves the safety of the gathering problem, and that guarantees that at least 1Z — 1 robots 
terminate their execution. The gracefully degrading algorithm we provide solves G in ST and 
B1Z£ rings, G^ in 1Z£ rings, G w i n -AC rings and G ew i n COT rings (refer to Section 5.3 for the 
definitions of G, Ge, G w and G ew)- 

Short-term perspectives. The algorithm we proposed makes multiple assumptions on the 
robots (fully-synchronous, communication when forming a tower, strong multiplicity detection, 
identifiers, chirality, persistent memory, knowledge of the total number of robots 1Z and of the 
size of the ring n). These assumptions are necessary for our algorithm. However, it could be inter¬ 
esting to study the necessity of these assumptions in order to conceive a gracefully degrading al¬ 
gorithm for the gathering problem with respect to ST, B1Z£, 1Z£, AC, and COT . In particular, it 
could be interesting to consider another computation model (i.e., consider the semi-synchronous 
model or the asynchronous model). 

Moreover, our algorithm is adapted only for ring-shaped graphs. Hence, it would be necessary 
to lead a similar study as ours but considering other topologies of graphs. The classical approach 
is first to generalize solutions to grids and then to tori as intermediate steps, before considering 
any graph. 

The gathering problem is certainly not the only problem using robots that becomes impossible 
when the dynamics of the graphs increase. For instance, the scattering problem with robots 
endowed with local vision seems to be impossible in AC or COT graphs. Therefore, it would be 
nice to find all the problems that become impossible when the dynamics of the graphs increase, 
and for each of these problems, find weaker versions of them in order to conceive gracefully 
degrading algorithms to solve them. 
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Midterm perspectives. In addition to be gracefully degrading, one may observe that our 
algorithm is optimal for the specifications of the gathering problem and classes of dynamic graphs 
we consider: our algorithm solves the best version of the gathering problem (among the one we 
propose) in the classes of dynamic graphs we consider (refer to Table 6.1). Note that this does 
not mean that there is no other possible variant of the gathering problem or no other gracefully 
degrading gathering algorithm that could be considered as better. We can generalize this intuition 
with the following notion: 

Definition 7.1 (Optimal gracefully degrading algorithm). Given a model M, a problem Vo, a 
set &p = {' Pi,... ,Vk} of problems either equal to or weaker than Vo, with |5-p| > 1, and a set 
Sc = {Co,..., Cfc} of classes of dynamic graphs such that: 

1. \S C \ >2. 

2. For all i, with 1 < i < k,Co C Ci. 

3. For all i, with 0 < i < k, and for all j, with 0 < j < k, if Ci C C 3 then Vi is either stronger 

than or equal to the problem Vj (i.e., S£p i £ S£ Pt ). 

4■ There exists at least one i, with 1 < i < k, such that Vo is impossible to solve in Ci under 

M. 

a (Vq, S-p, Sc)-optimal gracefully degrading algorithm A for Vq under M. satisfies: 

• A is a (Vo, S-p, Sc)-gracefully degrading algorithm for Vo under M. 

• For all i, with 0 < i < k, and for all j, with 0 < j < k, if Ci C Cj and A does not solve Vi 

in Cj under Jcl then Vi is impossible to solve in Cj under M. 

We say that an algorithm is optimal gracefully degrading with respect to a family of classes 
of dynamic graphs Sc, for a problem Vq, and a set of weaker problems S-p, if this algorithm is 
(Vo, S-p, Sc)-optimal gracefully degrading. 

Our algorithm is then an optimal gracefully degrading gathering algorithm with respect to 
ST, BTZS, TZS, AC, and COT, for G, G e, Gyp, and Gew- 

Let us analyze below which of the gathering algorithms of the state of the art that were 
gracefully degrading with respect to some classes of dynamic graphs are also optimal gracefully 
degrading with respect to some classes of dynamic graphs for some versions of the gathering 
problem. Depending on the classes of dynamic graphs and the weaker versions of the gathering 
problem considered, a gathering algorithm could be or not optimal gracefully degrading. In the 
following, we consider the classes of dynamic graphs (among the one we studied in this thesis) 
we think the authors (of the algorithms of the state of the art) would have considered, and the 
weaker versions of the gathering problem we think they would have focused on. Recall that 
ST C BTZS C TZ£ c COT and ST C AC C COT. 

Algorithms proposed by Izumi et al. [110]: Their algorithms are optimal gracefully degrad¬ 
ing (in the case where the robots do not start from a periodic configuration) with respect to 
ST, BTZS, TZ£, AC, and COT, for G, G^;, and a weaker version V of the gathering problem 
where the robots must end up (without necessarily terminating) on at most two different 
nodes (not necessarily adjacent). Indeed, their algorithms solve G in ST and BTZS rings, 
Gp in TZS rings, and V in AC and COT rings (and G is impossible to solve in TZS rings, and 
G and G e are impossible to solve in AC and COT rings). 

Algorithms proposed by Di Luna et al. [122]: When the initial configuration of the robots 
is not periodic, their algorithms (except the one considering robots endowed with the cross 
detection and without chirality) are optimal gracefully degrading with respect to ST and 
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AC, for G, and the near-gathering with termination. Indeed, their algorithms solve G in 
ST rings, and the near-gathering with termination in AC rings (and G is impossible to solve 
in AC rings). 

Algorithm proposed by Ooshita and Datta [128]: Their algorithm is optimal gracefully de¬ 
grading with respect to ST, BTZ£, TZ£, AC, and COT , for G, G e, and the near-gathering 
without termination. Indeed, it solves G in ST and B7Z£ rings, G^; in TZ£ rings, and the 
near-gathering without termination in AC and COT rings (and G is impossible to solve in 
1Z£ rings, and G and G^; are impossible to solve in AC and COT rings). 

We proved that our algorithm provides for each class of dynamic graphs studied the best 
specification of the gathering problem among the ones we considered (refer to Table 6.1). We do 
not claim that another algorithm could not be able to satisfy stronger specifications among the 
infinity of variants one can propose of the original gathering specification. For instance, one may 
consider a specification of the gathering where all the robots terminate their execution on the 
same node in finite time and such that at least x > 0 of these robots terminate in bounded time. 
This specification is stronger than G^. Perhaps another gracefully degrading gathering algorithm 
would be able to solve this new specification instead of G^; in classes of dynamic graphs in which 
our algorithm solves G e- If, for each class of dynamic graphs considered, this gracefully degrading 
gathering algorithm satisfies stronger (or equal) specifications of the gathering problem compared 
to the one we solve, then it could be considered stronger than our algorithm. 

Therefore, one question that comes in mind is “Is there a strongest gracefully degrading gath¬ 
ering algorithm?” We call a gracefully degrading algorithm an optimum gracefully degrading 
algorithm if it solves the best versions of the gathering problem in the classes of dynamic graphs 
analyzed. Note that, if such an optimum gracefully degrading algorithm exists, it is necessarily 
optimal gracefully degrading. Moreover, note that, since some problems are not comparable, it 
could exist multiple optimum gracefully degrading algorithms for a same problem. 

Among the articles of the state of the art that are optimal gracefully degrading, we detail 
below which of them are optimum gracefully degrading. For this study we still consider the 
weaker versions of the gathering problem and classes of dynamic graphs we think the authors 
would have focused on. 

Algorithms proposed by Izumi et al. [110]: Even if their algorithms are optimal gracefully 
degrading with respect to ST, BTZS, TZ£, AC, and COT, for G, Ge, and a weaker version 
of the gathering problem where the robots must end up (without necessarily terminating) 
on at most two different nodes (not necessarily adjacent), they are not optimum gracefully 
degrading. Indeed, in COT rings, it is possible to solve the near-gathering without termi¬ 
nation (refer to the algorithm of Ooshita and Datta [128]). Moreover, in AC rings, it is 
possible to solve the near-gathering with termination (refer to the algorithms of Di Luna et 
al. [122]). Hence, in COT and AC rings, we are sure that their algorithms do not satisfy 
the best versions possible of the gathering problem, proving that their algorithms are not 
optimum gracefully degrading. 

Algorithms proposed by Di Luna et al. [122]: Their algorithms are optimal gracefully de¬ 
grading with respect to ST and AC, for G, and the near-gathering with termination. Noth¬ 
ing indicates that their algorithms are not optimum gracefully degrading. Hence, there is 
an open question on this subject. 

Algorithm proposed by Ooshita and Datta [128]: Even if their algorithm is optimal grace¬ 
fully degrading with respect to ST, BTZ£, TZ£, AC, and COT, for G, G e, and the near¬ 
gathering without termination, it is not optimum gracefully degrading. In AC rings, their 
robots may end up on two adjacent nodes without terminating their execution. However, in 
AC rings, it is possible to solve the near-gathering with termination (refer to the algorithms 
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of Di Luna et al. [122]). Hence, in AC rings, we are sure that their algorithm does not 
satisfy the best version possible of the gathering problem, proving that their algorithm is 
not optimum gracefully degrading. 

The weaker version of the gathering problem solved by Di Luna et al. [122] in AC rings and 
the weaker version of the gathering problem we solved in AC rings are not comparable. Hence, 
nothing indicates that our algorithm is not optimum gracefully degrading. An interesting open 
question is to analyze whether our algorithm is an optimum gracefully degrading algorithm. 

Aside gathering in robot networks, defining formally a general form of optimum degradation 
in the gracefully degrading approach seems to be a challenging future work. 

When we study gracefully degrading algorithms, multiple classes of dynamic graphs are con¬ 
sidered. In this thesis we consider ST, BfZS, 1Z£, AC, and COT graphs. However, multiple other 
classes of dynamic graphs exist (refer to the hierarchy of classes of dynamic graphs presented 
in Section 2.1.2). Hence, another interesting perspective is to determine the classes of dynamic 
graphs that are important to study to apply a gracefully degrading approach to a problem. It 
is not necessarily important to study every class of dynamic graphs. Indeed, considering all the 
possible classes of dynamic graphs would make the gracefully degrading algorithm very complex. 
Moreover, some classes of dynamic graphs presented in a theoretical point of view are in practice 
not likely to occur. Therefore, it is possible not to handle these classes of dynamic graphs while 
conceiving a gracefully degrading algorithm. In other words, it is important to determine which 
classes of dynamic graphs to study depending on the trade-off between the probability of their 
occurrence and the complexity of the algorithms. 
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In this part, we focus on speculative algorithms. Intuitively, a speculative algorithm is an 
algorithm that must satisfy the specification of the problem studied in any execution in which 
it is susceptible to be executed and that must be very efficient for the executions that are more 
likely to happen. The conception of a speculative algorithm for a given problem is motivated by 
high lower bounds obtained when considering some environments. We focus on the exploration 
problem (refer to Section 3.1.4 for the definitions of the different variants of the exploration 
problem). More precisely, the speculative algorithms we provide solve the perpetual exploration 
problem in which all the nodes of the graph must be visited infinitely often by at least one robot. 

In this chapter, we first present, in Section 8.1, the state of the art about speculation, then, 
in Section 8.2, we present the state of the art about exploration in dynamic graphs. Finally, in 
Section 8.3, we give an overview of the next chapters of this part. 


8.1 Speculation 

8.1.1 Definition 

Generally, while conceiving distributed algorithms the worst case is considered: the algo¬ 
rithms are optimized for this case. However, very often the worst case is not the most frequent 
one. For instance, generally, while conceiving distributed algorithms above internet the communi¬ 
cations are assumed to be asynchronous. However, in practice internet is synchronous. Therefore, 
the lower bounds obtained (in the worst case) to solve problems do not necessarily fit the lower 
bounds obtained in the most frequent environments. Hence, it would be interesting to optimize 
algorithms for the most frequent case to circumvent the high lower bounds obtained only in some 
rare environments. 

A speculative algorithm [114, 77, 9] is an algorithm that must satisfy its requirements (i.e., the 
specification of the problem considered) in any execution in which it is susceptible to be executed 
but also that must be very efficient for the executions that are more likely to happen. 

In this thesis, we consider dynamic graphs. Depending on the context, some dynamic graphs 
are more frequent than others. Hence, in this thesis, we extend this notion of speculation to algo¬ 
rithms executed in dynamic graphs. A speculative algorithm for dynamic graphs must satisfy the 
specification of the problem considered in any class of dynamic graphs in which it is susceptible 
to be executed and must be optimized (for instance in terms of the time execution) for the classes 
of dynamic graphs in which it is more likely to be executed. 
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As indicated in Section 2.1.2, the strongest class of dynamic graphs of the classification of 
Casteigts et al. [40, 38] having a recurrent temporal connectivity is the class of COT graphs. This 
class includes all the other classes of dynamic graphs having a recurrent temporal connectivity. 
As an example, if we consider that an algorithm A (that has no knowledge on the dynamics of 
the graphs and must solve a task starting from any time) may be executed in any dynamic class 
of graphs, then to be speculative for dynamic graphs, it must be able to satisfy the specification 
of the problem studied in COT graphs. However, depending on the context of the applications, 
COT graphs are not necessarily the class of dynamic graphs the most common. Indeed, even if in 
dynamic systems there are unstable moments where the systems are very dynamic, some dynamic 
graphs are ST graphs, or at least they evolve in such a low way that they are static in the point 
of view of the applications that stop to be executed before changes in the topologies occur (i.e., 
the stable moments are long enough for the applications to stop being executed). Therefore, if A 
is executed in such an environment, to be a speculative algorithm for dynamic graphs, it could 
be optimized (for instance in terms of the time execution) for ST graphs. 

To define formally what a speculative algorithm for dynamic graphs is, we first need to define 
the property which has to be optimized by such an algorithm. Given an algorithm A solving a 
problem V in a class of dynamic graphs C under a model A4, the property that A has to optimize 
is the measurement of performance m _4 of A: it is a function that associates to any execution of A 
in C under A1 its cost. Depending on the context, this measurement of performance may return 
a cost in terms of time, movements of the robots, memory, ... 

In the following, by abuse of language, we denote by f\c the restriction of the function / on 
all the executions in all the dynamic graphs that belong to C. 

We say that a problem V is not solvable in ©(/) if there is no algorithm that satisfies V with 
a measurement of performance in ©(/). 

A speculative algorithm where the speculation is done on the dynamics of the system can be 
defined formally as follows: 

Definition 8.1 (Speculative algorithm for dynamic graphs). Given a model At, a problem V, a 
set T = {/o, • • •, fk} of functions, with |A| > 2 , a set Sc = {Co,... ,Ck} of classes of dynamic 
graphs such that: 

1. |S c | >2. 

2. For all i, with 0 < i < k — 1, C* C Ck- 

3. For all i, with 0 < i < k, if Ci C Cj then fi\c i G 0(fj\c j )- 

4- There exists at least one i, with 0 < i < k — 1, such that V is not solvable in 0(./)|c,) in Ck 
(implying that fi\ Ci G o(f k \c k ))- 

a ( V , T, Sc)-speculative algorithm A for V under At (for dynamic graphs) is such that: 

• A satisfies the specification ofV inCk under At. 

• For all i, with 0 < i < k, the measurement of performance m _4 of A under Af satisfies 

"Uk € ®(/* k) • 


We say that an algorithm is speculative if there exist a problem V, a set of functions T, and 
a set of classes of dynamic graphs Sc such that this algorithm is ((P, T, Sc)-speculative. We say 
that an algorithm is speculative with respect to a family of classes of dynamic graphs Cj, ..., Ck, 
for a problem V, in function of a category of costs (for instance a memory cost in bytes) if there 
exists a set of functions T (each associating to any execution a cost belonging to the previous 
category of costs) such that this algorithm is ( (P , T, {Ci ,... C*,})-speculative. 
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Above, we give a formal definition of a speculative algorithm for robot networks. This defini¬ 
tion is suitable to the intuition given of this notion. Indeed, the points 1 and 2 of the definition 
permit to indicate that the problem must be studied in a dynamic environment that may change 
with time, and such that there is a relation between the changes (considering a class of dynamic 
graph studied, there is at least another class such that the two classes are comparable). Moreover, 
the combination of points 3 and 4 imposes that a set of comparable functions are considered. A 
speculative algorithm for a problem should solve the problem in each class of dynamic graphs 
considered, and more the dynamics decrease more its measurement of performance is low. Be¬ 
sides, the point 4 of the definition imposes that the problem studied is not solvable in a strong 
class of dynamic graphs (possessing weak connectivity assumptions) with a measurement of per¬ 
formance equal to the one with which it is solvable in a weak class (possessing strong connectivity 
assumptions). This point is mandatory to avoid the conception of speculative algorithms that 
consider only classes of dynamic graphs in which the problem studied is solvable with a good 
measurement of performance and that are speculative only because they cannot succeed to find 
an appropriate optimized solution to the problem. 

8.1.2 State of the Art 

The definition of speculative algorithms is general. The speculation can be made on multiple 
criteria. For instance, one may speculate that executions that are more likely to happen are 
synchronous, while some others may speculate that executions that are more likely to happen are 
without fault, ... In this section, we present articles of the state of the art providing speculative 
algorithms. 

Kotla et al. [114] present a speculative BFT (i.e., Byzantine Fault-Tolerant) replicated state 
machine protocol named Zyzzyva. In a BFT replicated state machine protocol, clients send 
queries to a server (called primary) that replicates each query on multiple other servers (called 
replicas). Since the primary and the replicas may be subject to Byzantine faults, the replication is 
done in order to produce correct results to clients. BFT replicated state machine protocols have 
to ensure consistency in the answers to clients if at most a third of the servers are Byzantine. 
For the clients to receive consistent answers, each replica must execute the queries of the clients 
in the same order. In most of the BFT replicated state machine protocols, the replicas have to 
execute a 3-phase commit protocol to agree on the ordering of the requests. When executing a 
3-phase commit protocol the number of messages sent in the network is quadratic in the number 
of replicas, and the clients receive their answers in five rounds (in good cases). Here in Zyzzyva, 
it is assumed speculatively that the replicas will execute the requests in the same order. In good 
cases, the clients receive their answers in three rounds and the total number of messages sent is 
linear in the number of replicas. Therefore, here, the speculation is used to reduce the cost in 
time and in messages sent of usual BFT replicated state machine protocols. However, in case 
of faulty execution, Zyzzyva restarts the process using a 3-phase commit protocol (to guarantee 
correct results in each case). 

Aublin et al. [9] have also proposed two speculative BFT replicated state machine protocols. 
They first present a protocol named AZyzzyva which speculates that there is no failure and 
no asynchronism. They also present a protocol named Aliph in which there are two levels of 
speculation: they speculate that there is no failure, no asynchronism and no contention; and 
when a problem is detected, they speculate that there is contention but that there is no failure 
and no asynchronism. 

Dubois and Guerraoui [77] are interested in the speculative aspect of self-stabilizing algo¬ 
rithms (algorithms that tolerate arbitrary faults such that there exists a time t. from which these 
faults no longer occur). When there are faults in the system, a self-stabilizing algorithm is not 
required to always satisfy the specification of the problem V it has to solve. Hence, this ap¬ 
proach is a non-masking approach: the faults are not masked. After time t there exists a time t' 
from which the self-stabilizing algorithm satisfies the specification of V. The stabilization time 
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of a self-stabilizing algorithm corresponds to the maximal duration t' — t over all its execution. 
The authors introduce the notion of speculative stabilization, where the stabilization must be 
guaranteed in any execution and optimized in executions that are more likely to happen. As an 
example, they provide a speculative self-stabilizing mutual exclusion algorithm that stabilizes in 
an optimal number of rounds for synchronous executions. 

Note that there is no speculative algorithm for robot networks evolving in dynamic graphs. 


8.2 State of the Art About Exploration in Dynamic Graphs 

We want to study speculative algorithms applied to robot networks. On this purpose we study 
the exploration problem. 

In this thesis, we focus on deterministic algorithms. However, there exist some probabilis¬ 
tic exploration algorithms performed in dynamic graphs. For instance, this is the case of the 
algorithm proposed by Avin et al. [11], 

Moreover, in this thesis, we focus on online algorithms (i.e., algorithms assuming that the 
dynamics of the graphs are not known in advance) which seems to be a more realistic approach 
than the offline approach (where it is assumed known in advance the dynamics of the graphs: the 
time of appearance and disappearance of each edge is known in advance). However, there exist 
some articles dealing with offline deterministic solutions to the exploration problem [106, 1, 79, 
126]. 

In the state of the art, the only dynamic environments in which the exploration problem has 
been studied are the periodic-edges dynamic graphs and the T-interval connected graphs. We 
present, in Section 8.2.1, the state of the art about the exploration problem in periodic-edges 
dynamic graphs, and, in Section 8.2.2, the state of the art about the exploration problem in T- 
interval connected graphs (refer to Section 2.1.2 for the definitions of these classes of dynamic 
graphs). 

8.2.1 Periodic-edges Dynamic Graphs 

In this section, we present the state of the art about the exploration problem in periodic-edges 
dynamic graphs (graphs in which each of the edges is present periodically). 

While studying periodic-edges dynamic graphs, a particular model (that cannot model all 
the possible periodic-edges dynamic graphs, see Figure 8.1) named PV-graph is considered in the 
state of the art, hence, we first present briefly this model here. A PV-graph is composed of sites 
and carriers: the sites are the nodes of the graph, and the carriers are entities that move from 
site to site in a periodic way. Hence, the edges of a PV-graph appear and disappear depending on 
the movements of the carriers. Since the movements of the carriers are periodic, the appearance 
and disappearance of the edges are also periodic. The ordered set of sites visited periodically by 
a carrier is called a route. Carriers may carry robots (i.e., carriers may transport robots from 
site to site). This model is inspired by public transportation systems like subways transporting 
passengers. 

Note that the graph formed by all the routes of the carriers is a directed dynamic graph. 
When the routes formed by the carriers have the same period they are qualified of homogeneous, 
otherwise they are qualified of heterogeneous. If a route does not contain sites with self-loop or 
multiple arcs linking two sites, then it is a simple route. If each arc of a route appears at most 
once in this route, then the route is said to be circular. Finally, if a route is neither simple nor 
circular, it is said to be arbitrary. In the following, n corresponds to the number of sites in the 
PV-graph, k is the number of carriers and p is the size of the longest route. 

Flocchini et al. [89] consider the PV-graph model where the carriers move synchronously 
from site to site in a periodic way and in which only a single robot is evolving. Initially the robot 
is located on a carrier, and it can move from a carrier ci to a carrier C 2 only if c\ and C 2 are 
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Figure 8.1: Example of a periodic-edges evolving graph that cannot be modeled in the PV-graph 
model. 



Routes 

Homogeneous 

Heterogeneous 

Arbitrary 

Q(k * p) 

@(k * p 2 ) 

Simple 

Q(k * n 2 ) 

@(fc * n 4 ) 

Circular 

Q(k * n ) 

@(fc * n 2 ) 


Table 8.1: Complexities in terms of movements of the algorithms provided by Flocchini et al. 
[89] depending on the kind of the routes. 


located at the same time on the same site. The carriers have distinct identifiers. The robot is 
able to know the identifier of the carrier that carries it. In this setting, the authors establish the 
necessary conditions for the robot to visit each of the sites in finite time and then to terminate 
its execution (i.e., for the exploration with stop to be solved). 

Note that, in this setting, only the exploration of highly connected PV-graphs is possible 
(where highly connected means that the graph, where nodes represent the carriers and where 
there exists an edge between two carriers if these two carriers are located at the same time on the 
same site, is connected). 

The authors prove that if the sites have no identifiers, the exploration cannot be solved if the 
robot has no knowledge on an upper bound on p. They also prove that if the sites have distinct 
identifiers, then the exploration is impossible if the robot does not know n or an upper bound on 
P- 

The authors present different algorithms to solve the exploration problem in such setting. De¬ 
pending on the kind of routes (homogeneous, heterogeneous, simple, circular, arbitrary) present 
in the system, the authors give the different complexities of their algorithms. All their com¬ 
plexities correspond to the number of movements the robot has to do to visit all the sites. See 
Table 8.1 for the complexities of their algorithms. For each kind of routes, they also compute the 
lower bound in terms of movements to solve the exploration problem. This study shows that the 
complexities of their algorithms fit the lower bounds. 

Wade and Ilcinkas [105] also consider the PV-graph model where the carriers move syn¬ 
chronously from site to site in a periodic way, and in which only a single robot evolves. However, 
contrary to Flocchini et al. [89], for the robot to move from a carrier to another one, there is no 
need for the two carriers to be present at the same time on the same site: the robot can disembark 
(from the first carrier) on a site and wait for another carrier on this site. This permits the authors 
to analyze the exploration with stop in a connected PV-graph, where connected means that the 
graph, where nodes represent the carriers and where there exists an edge between two carriers if 
there exists a common site on their routes, is connected. They do not need the PV-graph to be 
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a highly connected PV-graph. They consider that there is no identifier on the sites. The carriers 
have distinct identifiers and the robot moving on a carrier is able to know its identifier. 

In this setting, first, the authors prove (like Flocchini et al. [89] did) that the robot needs 
some information on the PV-graph, like an upper bound on p, to be able to explore it. Then, the 
authors provide an algorithm such that, in the general case (heterogeneous and arbitrary routes), 
its complexity in terms of movements is in 0(min{k * p,n * p, n 2 }). The authors, besides, prove 
that the lower bound in terms of movements to solve the exploration problem fits the complexity 
obtained by their algorithm. They also show that their algorithm provides a time complexity in 
0(n * p) rounds when the routes are heterogeneous and arbitrary, and prove that this fits the 
lower bound of the time complexity needed to solve the exploration problem while considering 
these kinds of routes. The authors prove that all these results are still true when considering 
homogeneous or highly connected routes. In other words, their algorithm for homogeneous or 
highly connected routes has a complexity in terms of movements in Q{min{k * p,n * p, n 2 }) and 
a time complexity in @(n * p) rounds. 

Flocchini et al. [88] consider PV-graphs in which multiple robots evolve and where some of 
the sites (called black holes) make disappear the robots that disembark on them. They assume 
that there are terminal sites: a terminal site forces the robots carried on this site to disembark 
on it. The carriers they consider move asynchronously from site to site. They also consider that 
the robots compute in an asynchronous manner. All the robots of the system start initially their 
execution on the same site of the PV-graph. The robots must wait on sites to move from one 
carrier to another one. They communicate with each other using whiteboards on sites that can 
be read and written by them. Each whiteboard is accessed in fair mutual exclusion. In this 
setting, the authors study the problem of the exploration such that, in finite time, at least one 
robot has not disappeared, and all robots that have not disappeared stop their execution and 
know which sites of the PV-graph are black holes. 

First, the authors establish the necessary conditions for this problem to be solvable. Par¬ 
ticularly, they prove that the carriers must have distinct identifiers visible by the robots for the 
exploration problem to be solved. They also prove that if the robots do not know either the 
number of carriers in the system or the number of sites in the system, then the exploration is 
impossible. Moreover, for each site s, the robots must know how many routes contained s. The 
site where all the robots start their execution, as well as the terminal sites must not be black 
holes. The robots must know the total number of black holes contained in each route. Call this 
number the number of black hole stops. Since some sites are present in multiple routes, and since 
some carriers may cross multiple time the same sites while following their routes, note that the 
number of black hole stops may be greater than the total number of black holes. The number of 
robots must be strictly greater than the number black hole stops. The graph, where the nodes 
represent the carriers and where an edge between two carriers means that their routes share a 
site that is not a black hole, must be connected. The robots must know the length of the routes 
of each carrier. Finally, the robots must be able, once disembarked on a site s from a carrier c, to 
go back on c from s. 

Then, the authors prove that these necessary conditions are also sufficient. To do so, they 
provide an algorithm whose complexity in terms of movements is equal to 0(7Z *k 2 * p + k * p 2 ) 
where TZ is the number of robots in the system. Finally, they prove that the complexity of their 
algorithm fits the lower bound. 

Flocchini et al. [87] are interested in the exact same problem as Flocchini et al. [88], except 
that they assume that the robots may start from arbitrary scattered positions. With the exact 
same assumptions than those considered by Flocchini et al. [88], except that the whiteboards are 
now on the carriers and not on the sites, they provide an algorithm whose complexity in terms 
of movements is equal to 0(JZ * k 2 * p + k * p 2 ). Therefore, this algorithm is optimal (since its 
complexity matches the lower bound provided by Flocchini et al. [88] and since the proof to show 
this lower bound is independent of where the whiteboards are located). 
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Value of T 

Complexity 

T = 1 

@(n) 

2 < T < (n + l)/2 

0(n - T) 

T> (n+l)/2 

0(n) 


Table 8.2: Time complexities (in rounds) of the algorithm provided by Ilcinkas and Wade [106] 
depending on the value T defining the T-interval connected ring in which a robot (knowing the 
dynamics of the ring) evolves. 

8.2.2 T-interval connected Graphs 

In this section, we present the state of the art about the exploration problem in T-interval 
connected graphs (graphs connected at each instant time such that, for all-time interval of length 
T, a subset of the edges present form the same spanning connected subgraph of G, where G is the 
footprint of the dynamic graph). While considering T-interval connected graphs, some articles of 
the state of the art make the strong assumption that the exploring robots know the dynamics of 
the graphs in which they evolve, i.e., the robots know which edges appear and disappear and at 
which time. Some articles, however, assume that the robots do not have access to such knowledge. 
We first present below the articles that deal with robots knowing the dynamics of the graphs and 
then we present the articles where the robots have no knowledge on the dynamics. 

With knowledge of the dynamics. Ilcinkas and Wade [106] consider only a single robot 
evolving in T-interval connected rings. In this setting, they provide an algorithm exploring any 
ring in O(n) rounds. More precisely, depending on the value T defining the T-interval connected 
ring in which the robot is evolving, the time complexity of their algorithm varies (refer to Ta¬ 
ble 8.2). The authors prove that the time complexities obtained by their algorithm fit the lower 
bounds. 

Ilcinkas et al. [104] consider only a single robot evolving in T-interval connected cactus (i.e., 
connected graphs in which any two simple cycles have at most one node in common). In this 
setting, they provide an algorithm exploring any cactus in 0(2V lo s( n ) * n) rounds. The authors 
prove that the time complexity obtained by their algorithm fits the lower bound. 

Without knowledge of the dynamics. Ilcinkas and Wade [106] consider only a single robot 
evolving in BTZ£ and T-interval connected rings, i.e., even if at most one edge of the ring may be 
missing at each instant time, any edge appears at least once every 5 units of time. In this setting, 
the authors search for the necessary and sufficient time to explore a dynamic ring. They provide 
an algorithm solving the exploration problem in 0(n+ (n/max{l, T}) *S) rounds, and prove that 
this time complexity fits the lower bound. 

Flocchini et al. [86] consider arbitrary undirected graphs in which some nodes (called black 
holes) make disappear the robots that are located on them, and some edges (called black edges) 
make disappear the robots that cross them. The black holes and edges are fixed in the network: 
their positions do not evolve with time. In other words, the dynamics do not come from the black 
holes and edges. The nodes that are not black holes are called white nodes, and the edges that 
are not black are called white edges. Among the white edges, some may fail during the execution. 
The dynamics come from these failures. An edge cannot fail while a robot is crossing it. The 
edges may fail at unpredictable time, but once an edge has failed, it does not appear anymore 
in the graph (i.e., it cannot recover). Any number of edges may fail as long as the white nodes 
and white non-faulty edges form a connected graph. Hence, the dynamics modeled correspond 
to particular AC graphs (i.e., 1-interval connected graphs) where no edge that disappears can 
appear again. 
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While focusing on this environment, the authors consider asynchronous robots that are able 
to communicate thanks to whiteboards on nodes in which robots can read and write in fair mutual 
exclusion. All the robots have distinct identifiers. The authors assume that the edges are crossed 
in a FIFO way, and that nodes and ports of a same node have distinct identifiers. They study the 
exploration of the graph starting from a configuration where all the robots are scattered. They 
indicate that the exploration is successful if, in finite time, the four following conditions are true: 
(i) at least one robot has not disappeared; ( ii ) all the robots that have not disappeared terminate 
their execution; (in) all the (non-faulty) white edges linking two white nodes have been crossed; 
and ( iv ) all the black edges linking a white node to any other node and white edges linking 
a white node to a black hole have been marked as dangerous (i.e., the robots have indicated 
on the whiteboards that these edges must not be crossed). The authors show that solving the 
exploration is possible. Moreover, thanks to their algorithm, they show that the exploration can 
be done thanks to / + 1 robots, where / is equal to the number of edges (black or white) linking 
a black hole and a white node, plus two times the number of black edges linking two white nodes. 

Di Luna et al. [125] consider undirected AC rings (which are 1-interval connected rings). The 
nodes of the rings are divided into three parts: one for each port of the node and one at the 
middle of the node. The robots are synchronous (either fully-synchronous or senri-sychronous) 
and have access to each port of each node in mutual exclusion (i.e., at each instant time there 
is at most one robot on each port of each node). The robots are anonymous. When a robot is 
on a node, it is not able to detect if the adjacent edges to its node are present or missing. The 
authors consider multiple assumptions on the robots and on the ring and determine, depending 
on these assumptions, the feasibility of the exploration with stop problem (in which the robots 
have to explore in finite time the graph, and then they are required, also in finite time, to stop 
their execution once they detect that the graph has been explored). First they consider the 
fully-synchronous model. In this model, they prove that two robots are not able to solve the 
exploration with stop problem if the ring is anonymous (the nodes cannot be distinguished) and 
if the robots do not know an upper bound on the size of the ring. They prove, when the ring is 
anonymous and the robots know an upper bound N on the size of the ring, that the exploration 
with stop problem is solvable in 0(N ) rounds. This result is true whether the robots have the 
same chirality or not. When the robots do not know an upper bound on the size of the ring, the 
exploration is possible if there is a marked node (i.e., a node that is distinguishable from the other 
nodes). Indeed, in this setting, the authors provide an algorithm that solves the exploration with 
stop problem in 0(n ) (resp. 0(n * log(n ))) rounds, when the robots have (resp. have not) the 
same chirality. All the algorithms provided use only two robots. 

The authors also analyze the feasibility of this problem when the robots are semi-synchronous. 
They study three different settings: 

Passive transportation model: in this model, a sleeping robot (i.e., a robot that it is not 
selected to execute its L-C-M cycle) at a round t, located on the port p of its current node, 
will be moved during the Move phase of round t on the adjacent node linked to p in case 
where the adjacent edge to p is present at time t. 

Eventual transportation model: in this model, a sleeping robot at a round t, located on the 
port p of its current node, will eventually be selected to execute its L-C-M cycle while the 
adjacent edge to p is present. 

No simultaneity model: a sleeping robot located on the port p of its current node is not moved 
passively, and there is no guarantee on a possible selection of this robot to execute its L-C-M 
cycle while the adjacent edge to p is present. 

While considering the no simultaneity model, the authors prove that whatever the number of 
robots present in the system, the exploration with stop problem is not solvable. 

While considering the eventual transportation model, they also prove that the exploration 
with stop problem is not solvable whatever the number of robots. This is true even if the robots 
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know an upper bound on the size of the ring, have the same chirality, possess distinct identifiers 
and the ring possesses one marked node. However, when the exact size of the ring is known by the 
robots, the authors provide an algorithm solving the exploration with stop problem using three 
robots without chirality. 

While considering the passive transportation model, they prove that two robots without chi¬ 
rality knowing the size of the ring cannot solve the exploration with stop problem. However, in 
this setting, they provide an algorithm using two robots knowing an upper bound N on the size 
of the ring and having the same chirality that succeeds to solve the exploration with stop problem 
in 0(N 2 ) moves. They prove that the lower bound to solve this problem is in fl(n * N) moves. 
Finally, they provide an algorithm solving the exploration with stop problem using three robots 
without chirality and knowing an upper bound N on the size of the ring in 0(N 2 ) moves. 

Gotoh et al. [99] consider robots evolving in undirected dynamic tori of size n * m with 
3 < n < m, a torus being a set of n row rings and m column rings where each node is implied 
in two different rings (intuitively, it is a grid where each extremity node is linked to the opposite 
extremity node of the same row and/or column if any). More precisely, the dynamic tori they 
study are particular AC tori since each of the rings composing a torus are AC rings. The authors 
assume that each of the nodes of a torus is labeled with its row and column number. Each of the 
ports of a node is labeled with right , left, down and up. The labels of the nodes and ports are 
visible by the robots. Each node is divided into five parts: one for each of the ports of the node and 
one at the middle of the node. The robots have the same chirality. They are fully-synchronous. 
The robots access to each port of each node in mutual exclusion (i.e., at each instant time there 
is at most one robot on each port of each node). They know the size of the torus in which they 
are evolving: they know n and m. A robot is able to see if there are other robots on the different 
parts of its current node, but it is not able to know the exact number of robots located on each 
part of its node. The authors study the necessary and sufficient number of robots to explore with 
stop any torus when the robots are able to see the presence/absence of the adjacent edges of their 
current node and when they are not endowed with this ability. 

When the robots are not able to detect the presence/absence of the adjacent edges of their 
current node, the authors prove that n or less robots are not able to explore any dynamic torus 
(of size n*m with 3 < n < m). They provide two general algorithms for this setting: one solving 
the exploration of any dynamic torus with n + 2 robots (or more) in 0(m 2 ) rounds, and one using 
n+ 1 robots (or more) solving the exploration of any dynamic torus in 0(n*m 2 ) rounds. Finally, 
they provide an algorithm for this setting in the particular case where n = m, this algorithm 
solves the exploration with n + 1 robots in 0(n 2 ) rounds. 

When the robots are able to detect the presence/absence of the adjacent edges of their current 
node, the authors prove that when n = 4, at least 4 robots are needed to explore the dynamic 
tori, and when n > 4, then at least [n/2] +1 robots are needed to explore the dynamic tori. They 
provide two general algorithms for this setting: one solving the exploration of any dynamic torus 
with n > 4 using |"n/2] + 2 robots (or more) in 0(m 2 ) rounds, and one using |"n/2] + 1 robots 
(or more) solving the exploration of any dynamic torus with n > 5 in 0(n * m 2 ) rounds. Finally, 
they provide an algorithm for this setting in the particular case where n = m and n > 5, this 
algorithm solves the exploration using \n /2] +1 robots in 0(n 2 ) rounds. 


8.3 Contributions 

There is no speculative algorithm using robots evolving in dynamic graphs. The goal of this 
part is to extend the speculative notion to robot networks evolving in dynamic graphs. On this 
purpose, we choose to study the exploration problem. As seen in Section 8.2, this problem has 
never been analyzed in COT graphs. It has also never been studied in the case where robots are 
subject to transient faults (i.e., arbitrary faults such that there exists a time from which these 
faults no longer occur). To fill the lack of the state of the art, in this part, our contribution is 
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about speculative algorithms for the perpetual exploration problem using non-faulty as well as 
self-stabilizing (i.e., that tolerate transient faults) robots. 

The perpetual exploration problem for dynamic graphs may be formalized as follows: 

Definition 8.2 (Perpetual exploration of an evolving graph). Given an evolving graph Q, a 
perpetual exploration algorithm guarantees that every node of Q is infinitely often visited by at 
least one robot (i.e., a robot is infinitely often located at every node of Q). 

Note that this specification of the perpetual exploration does not require that every robot 
visits infinitely often every node of Q. 

In Chapter 9, we first characterize the necessary number of robots not subject to faults per¬ 
mitting to solve the perpetual exploration problem in COT rings. Then, we prove, by construc¬ 
tion, that it is possible to solve the perpetual exploration problem in COT rings with robots that 
are not subject to faults. Since our algorithm solves the perpetual exploration problem under 
the strongest class of dynamic rings (of the classification of Casteigts et al. [40, 38]) having a 
recurrent temporal connectivity, it is interesting to study the existence of a speculative algorithm 
solving this problem. The algorithm we provide is besides a speculative algorithm. To prove the 
speculative aspect of our algorithm we have to prove that, under some weak classes of dynamic 
rings, it provides some good execution properties. Here, we focus on the optimization of the time 
complexity in ST rings (compared to the one in COT rings). Since we study the perpetual explo¬ 
ration problem, it is not possible to optimize the time complexity corresponding to the amount 
of time taken for the task to terminate. We, therefore, focus on the cover time which is defined 
formally below. 

Definition 8.3 (Cover time). The cover time of an execution e is the worst time of the minimal 
time taken by the robots to explore at least once each node of the graph from any time of e. The 
cover time of an algorithm A is the worst cover time of the executions of A allowed by the model. 

While considering a COT ring, it is possible for all the edges of the graph to be initially 
missing and to stay missing for any arbitrary long time. Hence, since generally there are more 
nodes in the rings than robots to explore them, the cover time of every algorithm solving the 
perpetual exploration problem cannot be bounded when robots evolve in COT rings. Therefore, 
to prove the speculative aspect of our algorithm, we have to prove that its cover time in ST rings 
is bounded. We will additionally show that the cover time of our algorithm is asymptotically 
optimal in ST rings. 

In Chapter 10, we adopt the same strategy as in Chapter 9 except that we consider robots 
that may be subject to faults. More precisely, we consider robots subject to transient faults. 
Algorithms that are able to tolerate these kinds of faults are called self-stabilizing algorithms. 

Finally, in Chapter 11, we conclude the part about the speculation on the perpetual explo¬ 
ration. Then, we give an extension of our work on the characterization of the necessary and 
sufficient number of robots permitting to solve the perpetual exploration problem considering 
graphs other than ring-shaped ones. However, for these kinds of graphs we have not considered 
the speculative aspect of the algorithm given. 
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The exploration problem is an important problem of the literature. It has been largely studied 
in static graphs and has been considered in some dynamic graphs (AC. T-interval connected, etc.) 
but has never been studied in COT graphs. In this chapter, we characterize the number of robots 
necessary to solve the perpetual exploration problem in COT rings. Depending on these results, 
we describe some algorithms showing that the necessary number of robots is also sufficient to 
solve the perpetual exploration problem in COT rings. Even if it is possible to solve the perpetual 
exploration problem in COT rings, the cover time of such algorithms is necessarily unbounded 
(refer to Section 8.3). This motivates the conception of a speculative algorithm to solve the 
perpetual exploration problem. Indeed a speculative algorithm is an algorithm that must satisfy 
its requirements (i.e., the specification of the problem considered) in any execution in which it is 
susceptible to be executed but also that must be very efficient for the executions that are more 
likely to happen. In this chapter we consider only ST graphs (in addition to COT graphs) to 
prove the speculative aspect of our algorithm, i.e., we prove that the cover time of our algorithm 
is bounded (it has a cover time in @(n — R) rounds) and is asymptotically optimal when executed 
in ST graphs. 

The results presented in this chapter have been published in ICDCS 2017 [29], and in ALGO- 
TEL 2017 [30]. 

Results. In this chapter, we analyze the computability of the perpetual exploration problem in 
COT rings, i.e., we study the deterministic solvability of this problem with respect to the number 
of robots. In other words, we establish the necessary and sufficient number of robots to solve 
the perpetual exploration problem for any size of COT rings (see Table 9.1 for a summary). Our 
results for the sufficiency are constructive: we give algorithms and their proofs of correctness to 
prove the sufficiency. The algorithm using 3 robots and more is a speculative algorithm: its cover 
time is unbounded when executed in COT rings, however, when executed in ST rings, its cover 
time is bounded (in 0(n — R) rounds) and asymptotically optimal. 

In more details, we first provide, in Section 9.1, an algorithm that perpetually explores, us¬ 
ing a team of 1Z > 3 robots, any COT ring of n > 1Z nodes. We prove, in Section 9.2, that 
this algorithm is speculative, and that its cover time is asymptotically optimal when executed in 
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Number of Robots 

Size of Rings 

Results 

3 and more 

> 4 

Possible (Theorem 9.1) 

2 

> 3 

Impossible (Theorem 9.3) 

= 3 

Possible (Theorem 9.4) 

1 

> 2 

Impossible (Theorem 9.5) 


Table 9.1: Overview of the results. 


ST rings. Then, we show, in Section 9.3.1, that two robots are not sufficient to perpetually ex¬ 
plore COT rings with a number of nodes strictly greater than three. We provide, in Section 9.3.2, 
an algorithm using two robots that perpetually explore 3-nodes COT rings. In Section 9.4, we 
show that a single robot cannot perpetually explore COT rings with a number of nodes strictly 
greater than two. Finally, Section 9.5 concludes the chapter. 

In this chapter, we consider a system made of 1Z anonymous robots evolving in COT rings. 
Since the robots are anonymous, if multiple robots start from the same node they act similarly 
(if they have the same chirality). This is a problem since a single robot is not able to solve the 
exploration problem in COT rings (refer to Theorem 9.5). Therefore, we assume that initially 
the robots start their execution at distinct positions in the dynamic graph. Note that, since we 
assume that initially the robots are on distinct positions, we suppose that 1Z < n, in order not to 
have the ring initially trivially explored. In other words, we define a well-initiated execution as 
an execution ( 70 , 71 )( 71 , 72 X 72 ) 73 ) • • ■ such that 70 contains strictly less robots than the number 
of nodes of Q and is towerless (i.e., there is no tower in this configuration). In addition to the 
common assumptions made on robots all along the chapters of this thesis (see Section 3.2), we 
assume that the robots do not have the same chirality. The robots have no prior knowledge about 
the graph in which they evolve nor on the robots. They are unable to directly communicate with 
each other by any means. They are endowed with weak local multiplicity detection meaning that 
they are able to detect if they are alone on their current node or not, but they cannot know the 
exact number of co-located robots. Call this model M ex piaration (also refer to Figure 3.5). 

For the algorithms presented in this chapter, the variable dir of the robots can only take the 
values right or left (i.e., the variable dir cannot be equal to _L). Initially, this variable is set to 
left (which does not necessarily correspond to the counter-clockwise direction since the robots 
do not necessarily have the same chirality). 


9.1 With Three or More Robots 

This section is dedicated to the more general result: the perpetual exploration of COT rings 
of size greater than k (i.e., n > k) with a team of k > 3 robots. The speculative aspect of this 
algorithm is studied in Section 9.2. 

9.1.1 Presentation of the Algorithm 

We first describe intuitively the key ideas of our algorithm. Remind that an algorithm controls 
the move of the robots through their variable direction. Hence, designing an algorithm consists in 
choosing when we want a robot to keep its direction and when we want it to change its direction 
(in other words, turn back). 

The first idea of our algorithm is to require that a robot keeps its direction when it is not 
involved in a tower (Rule Ri). Using this idea, some towers are necessarily formed when there 
exists an eventual missing edge. Our algorithm reacts as follows to the formation of towers. If 
at a time t a robot does not move and forms a tower at time t + 1 , then the algorithm keeps the 
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direction of the robot (Rule R 2 ). In the contrary case (that is, at time t, the robot moves and 
forms a tower at time t+1) it changes the direction of the robot (Rule R 3 ). 

Let us now explain how the algorithm (Rules Ri, R 2 , and R 3 ) enables the perpetual ex¬ 
ploration of any COT ring. First, note that Rule Ri alone is sufficient to perpetually explore 
COT rings without eventual missing edge provided that the robots never meet (since in this case 
a robot does not change its direction and is infinitely often able to move in that direction). The 
main property induced by Rules R 2 and R 3 is that any tower is broken in a finite time and that 
at least one robot of the tower considers each possible direction. This property implies (combined 
with Rule Ri) that (i) the algorithm is able to perpetually explore any COT ring without even¬ 
tual missing edge (even if robots meet); and that ( ii ), when the ring contains an eventual missing 
edge, one robot is eventually located at each extremity of the eventual missing edge and considers 
afterwards the direction of the eventual missing edge. 

Let us consider this last case. We call sentinels the two robots located at extremities of the 
eventual missing edge. The other robots are called explorers. By Rule R 3 , an explorer that 
arrives on a node where a sentinel is located changes its direction. Intuitively, that means that 
the sentinel signal to the explorer that it has reached one extremity of the eventual missing edge 
and that it has consequently to turn back to continue the exploration. Note that, by Rule R 2 , 
the sentinel keeps its direction (and hence its role). Once an explorer leaves an extremity of the 
eventual missing edge, we know, thanks to Rule Ri and the main property induced by Rules 
r 2 and R 3 , that a robot reaches in a finite time the other extremity of the eventual missing edge 
and that (after the second sentinel/explorer meeting) all the nodes have been visited by a robot in 
the meantime. As we can repeat this scheme infinitely often, our algorithm is able to perpetually 
explore any COT ring with an eventual missing edge, that ends the informal presentation of our 
algorithm. 

Refer to Algorithm 9.2 for the formal statement of our algorithm called PEF_3+ (standing for 
Perpetual Exploration in FSYNC with 3 or more robots). Note that we have explained intuitively 
the algorithm thanks to 3 rules, but the algorithm is written with only one rule. Rule Robots of 
PEF__3+ corresponds to Rule R 3 of the intuitive description. The two other rules (Rules Ri and 
r 2 of the intuitive description) do not change the value of the variable dir of the robots, and 
hence there is no need for them to be written: the absence of the execution of Rule Robots 
corresponds to the execution of either Rule Ri or Rule R 2 . 


Algorithm 9.1 PEF 3+ 

1: Robots :: HasMovedQ A ExistsOtherRobotsOnNodeQ —> dir := dir 


9.1.2 Proof of Correctness 

In this section, we prove the correctness of PEF_3+ with k > 3 robots. In the following, we 
consider a COT ring Q of size at least k + 1 . Let e = ( 70 , 71 )( 71 , 72)(72,73) ... be any execution 
of PEF_3+ in Q. 

To prove the correctness of our algorithm in COT rings, we consider multiple cases: we first 
study COT rings without eventual missing edge (refer to Lemmas 9.2 and 9.5), then we consider 
COT rings with one eventual missing edge (refer to Lemma 9.8). When studying COT rings 
without eventual missing edge, we analyze the case where there is no tower in the execution 
(Lemma 9.2) and the case where there are towers in the execution (Lemma 9.5). We use some 
other lemmas to prove these three main lemmas: in particular we use lemmas giving properties on 
towers, and lemmas giving properties on configurations reached when an eventual missing edge 
is present in the execution. 

Lemma 9.1. If there exists an eventual missing edge in Q, then at least one tower is formed in 

e. 
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Proof. By contradiction, assume that e is an eventual missing edge of Q (such that e is not present 
in Q after time t) and that no tower is formed in e. 

Executing PEF_3+, a robot changes the global direction it considers only when it forms a 
tower with another robot. As, by assumption, no tower is formed in e, each robot is always 
considering the same global direction. All the edges of Q, except e, are infinitely often present 
in Q. Hence, any robot reaches one of the extremities of e in finite time after t. As the robots 
consider a direction at each instant time and that there are at least 3 robots, at least 2 robots 
consider the same global direction at each instant time. Hence, at least two robots reach the same 
extremity of e. A tower is formed, leading to a contradiction. □ 

Lemma 9.2. If e does not contain a tower, then every node is infinitely often visited by a robot 
in e. 

Proof. Assume that there is no tower formed in e. By Lemma 9.1, if there is an eventual missing 
edge in Q , then there is at least one tower formed. In consequence, all the edges of Q are infinitely 
often present in Q. 

Executing PEF_3+, a robot changes the global direction it considers only when it forms a 
tower with another robot. Hence, none of the robots change the global direction it considers in 
e. Since all the edges are infinitely often present, each robot moves infinitely often in the same 
global direction, that implies the result. □ 

Lemma 9.3. If a tower T of 2 robots is formed in £, then these two robots consider two opposite 
global directions while T exists. 

Proof. Assume that 2 robots form a tower at a time t in e. Let us consider the 2 following cases: 

Case 1: The two robots consider the same global direction during the Move phase of 
time t — 1. 

In this case, one robot (denoted r) does not move during the Move phase of time t, while the 
other (denoted r') moves and joins the first one on its current node. During the Compute 
phase of time t, r still considers the same global direction, while r' changes the global 
direction it considers by construction of EEF_3+. Then, the two robots consider two 
different global directions after the Compute phase of time t. 

Case 2: The two robots consider two opposite global directions during the Move 
phase of time t — 1. 

In this case, the two robots move at time t — 1. During the Compute phase of time t, the 
two robots change the global direction they consider by construction of PEF_3+. Hence 
they consider two different global directions after the Compute phase of time t. 

A robot executing PEF_3+ changes its global direction only if it has moved during the pre¬ 
vious step. So, the robots of the tower do not change the global direction they consider as long 
as they are involved in the tower. As the two robots consider two different global directions after 
the Compute phase of time t, we obtain the lemma. □ 

Lemma 9.4. No tower of £ involves 3 robots or more. 

Proof. We prove this lemma by recurrence. As there is no tower in 70 by assumption, it remains 
to prove that, if 7 1 contains no tower with 3 or more robots, so is 7 t+i- Let us study the following 
cases: 

Case 1: contains no tower. 

The robots can cross at most one edge at each step. Each node has at most 2 adjacent edges 
in Gt, hence the maximum number of robots involved in a tower of ^t+i is 3. If a tower 


120 



9.1. With Three or More Robots 


involving 3 robots is formed in 'Yt+U one robot r has not moved during the Move phase of 
time t, while the two other robots (located on the two adjacent nodes of its location) have 
moved to its position. That implies that the two adjacent edges of the node where r is 
located are present in Gt■ As any robot considers a global direction at each instant time, r 
necessarily moves in step t, that is contradictory. Therefore, only towers of 2 robots can be 
formed in 74 + 1 - 

Case 2: contains towers of at most 2 robots. 

Let T be a tower involving 2 robots in 7 ^ and u be the node where T is located in It- By 
Lemma 9.3, the 2 robots of T consider two opposite global directions in 7 t- 

Consider the 3 following sub-cases: 

(i) If there is no adjacent edge to u in Gt , then no other robot can increase the number of 
the robots involved in the tower. 

(m) If there is only one adjacent edge to u in Gt , then only one robot may traverse this 
edge to increase the number of robots involved in T. Indeed, if there are multiple robots 
on an adjacent node to u, then these robots are involved in a tower T' of 2 robots (by 
assumption on 7 ^) and they are considering two opposite global directions in 7 1 - However, 
as an adjacent edge to u is present in Gt and as the robots of T are considering two opposite 
global directions, then one robot of T leaves T at time t. In other words, even if a robot of 
T' moves on u, one robot of T leaves u. Then, there is at most 2 robots on u in 7 t+i. 

(to) If there are two adjacent edges to u in 7 j, then, using similar arguments as above, we 
can prove that only one robot crosses each of the adjacent edges of u. Moreover, the robots 
of T move in opposite global directions and leave u, implying that at most 2 robots are 
present on u in 74 + 1 - 


□ 

Lemma 9.5. IfQ has no eventual missing edge and e contains towers then every node is infinitely 
often visited by a robot in e. 

Proof. Assume that Q has no eventual missing edge and e contains towers. 

We want to prove the following property. If during the Look phase of time t, a robot r is 
located on a node u considering the global direction gd, then there exists a time t' >t such that, 
during the Look phase of time t! , a robot is located on the node v adjacent to u in the global 
direction gd and considers the global direction gd. 

Let t" > t be the smallest time after time t where the adjacent edge of u in the global direction 
gd is present in Q. As all the edges of Q are infinitely often present, t” exists. 

(i) If r crosses the adjacent edge of u in the global direction gd during the Move phase of time 
t v , then the property is verified. 

{ii) If r does not cross the adjacent edge of u in the global direction gd , this implies that 
r changes the global direction it considers during the Look phase of time t. While executing 
PEF_3+, a robot changes its global direction when it forms a tower with another robot. There¬ 
fore, at time t, r forms a tower with a robot r' . By Lemmas 9.4 and 9.3, two robots involved in a 
tower consider two opposite global directions. Hence, after the Compute phase of time t, r' con¬ 
siders the global direction gd. A robot executing PEF_3+ does not change the global direction 
it considers until it moves. So, r' considers the global direction gd during the Move phase of time 
f”. Hence, during the Look phase of time t” + 1, r' is on node v and considers the global direction 
gd. 

By applying recurrently this property to any robot, we prove that all the nodes are infinitely 
often visited. □ 
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Lemma 9.6. If Q has an eventual missing edge e (such that e is missing forever after time t) 
and, during the Look phase of a time t! > t, a robot considers a global direction gd and is located 
on a node at a distance d / 0 in Ug from the extremity of e in the global direction gd, then it 
exists a time t” > t! such that, during the Look phase of time t”, a robot is on a node at distance 
d — 1 in Ug from the extremity of e in the global direction gd and considers the global direction 
gd. 

Proof. Assume that Q has an eventual missing edge e (such that e is missing forever after time t) 
and that, during the Look phase of time t' > t, a robot r considers a global direction gd and is 
located on a node u at distance d ^ 0 in Ug from the extremity of e in the global direction gd. 

Let v be the adjacent node of u in the global direction gd. 

Let t” > t! be the smallest time after time t' where the adjacent edge of u in the global 
direction gd is present in Q. As all the edges of Q except e are infinitely often present and as u is 
at a distance d ^ 0 in Ug from the extremity of e in the global direction gd, then the adjacent 
edge of u in the global direction gd is infinitely often present in Q. Hence, f ” exists. 

(i) If r crosses the adjacent edge of u in the global direction gd during the Move phase of time 
f”, then the property is verified. 

(ii) If r does not cross the adjacent edge of u in the global direction gd, this implies that 

r changes the global direction it considers during the Look phase of time t. While executing 
PEF__3+ a robot changes the global direction it considers when it forms a tower with another 
robot. Therefore, at time t, r forms a tower with a robot r'. By Lemmas 9.4 and 9.3, two robots 
involved in a tower consider two opposite global directions. Hence, after the Compute phase of 
time t, r' considers the global direction gd. A robot executing PEF_3+ does not change the 
global direction it considers until it moves. Therefore, r' considers the global direction gd during 
the Move phase of time t”. Hence, during the Look phase of time t” + 1, r' is on node v and 
considers the global direction gd. □ 

Lemma 9.7. If Q has an eventual missing edge e, then eventually one robot is forever located on 
each extremity of e pointing to e. 

Proof. Assume that Q has an eventual missing edge e such that e is missing forever after time t. 

First, we want to prove that a robot reaches one of the extremities of e in a finite time after 
t and points to e at this time. If it is not the case at time t, then there exists at this time a 
robot considering a global direction gd and located on a node u at distance d / 0 in Ug from 
the extremity of e in the global direction gd. By applying d times Lemma 9.6, we prove that, 
during the Look phase of a time tf > t, a robot (denote it r) reaches the extremity of e in the 
global direction gd from u (denote it v and let v' be the other extremity of e), and that this robot 
considers the global direction gd. Let us consider the following cases: 

Case 1: r is isolated on v at time t'. 

In this case, by construction of PEF_3+, r does not change, during the Compute phase of 
time t', the global direction that it considers during the Move phase of time t! — 1. Moreover, 
a robot can change the global direction it considers only if it moves during the previous step. 
All the edges of Q except e are infinitely often present. As, at time t' , r points to e, it cannot 
move. Therefore, from time t', r does not move and does not change the global direction it 
considers. Then, r remains located on v forever after t' considering gd. 

Case 2: r is not isolated on v at time t'. 

By Lemmas 9.4, r forms a tower with only one another robot r'. By Lemmas 9.4 and 9.3, 
two robots that form a tower consider two opposite global directions. Hence, either r or r' 
considers the global direction gd while the other one considers the global direction gd. As 
all the edges of Q except e are infinitely often present, then in finite time either r or r' leaves 
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v. We can now apply the same arguments as those used in Case 1 to the robot that stays 
on v to prove that this robot remains located on v forever after t' considering gd. 

In both cases, a robot remains forever on v considering gd after t!. Assume without loss of 
generality that it is r. Let us consider the two following cases: 

Case A: It exists r' r considering gd at time t'. 

We can apply recurrently Lemma 9.6, and the arguments above to prove that a robot is 
eventually forever located on v' considering gd. 

Case B: All robots r' / r consider gd at time t. 

We can apply recurrently Lemma 9.6 to prove that, in finite time, a robot forms a tower 
with r on v. Then, by construction of PEF_3+, this robot considers gd after the Compute 
phase of this time (and hence during the Look phase of the next time). We then come back 
to Case A. 

In both cases, the lemma holds. □ 

Lemma 9.8. If Q has an eventual missing edge and e contains towers, then every node is 
infinitely often visited. 

Proof. Assume that Q has an eventual missing edge e that is missing forever after time t. By 
Lemma 9.7, there exists a time t! >t after which two robots r\ and r 2 are respectively located on 
the two extremities of e and pointing to e. As there are at least 3 robots, let r be a robot (located 
on a node u considering a global direction gd) such that r r\ and r ri- Let v be the extremity 
of e in the direction gd of u and v' be the other extremity of e. 

Applying recurrently Lemma 9.6, we prove that, in finite time, all the nodes between node u 
and v in the global direction gd are visited and that a robot reaches v. When this robot reaches 
v, it changes its direction (hence considers gd) by construction of PEF_3+ since it moves during 
the previous step and forms a tower. 

We can then repeat this reasoning (with v and v' alternatively in the role of u and with v' and 
v alternatively in the role of v) and prove that all nodes are infinitely often visited. □ 

Lemmas 9.2, 9.5, and 9.8 directly imply the following result: 

Theorem 9.1. PEF_3+ satisfies the perpetual exploration problem under M. exploration in COT 
rings of arbitrary size strictly greater than the number of robots using an arbitrary number (greater 
than or equal to 3) of robots. 

9.2 Speculative Aspect of PEF 3+ 

In this section we prove that PEF_3+ is a speculative algorithm. As indicated in Section 8.3, 
the cover time of any perpetual exploration algorithm in COT rings is unbounded (since it is 
possible, in a COT graph, to have initially and during an arbitrary long time all the edges of the 
graph missing). Since, by Theorem 9.1, PEF_3+ solves the perpetual exploration problem in 
COT rings, and since its cover time in COT rings is unbounded, the following lemma is sufficient 
to prove that PEF_3+ is a speculative algorithm for the perpetual exploration problem with 
respect to ST and COT , in function of the cover time in rounds. Indeed, in the lemma below, we 
prove that the cover time of PEF_3+ in ST rings is bounded. 

We recall that, in this chapter, we assume that 1Z < n for all the algorithms considered 
in order to ensure that the perpetual exploration problem is not trivially solved in the initial 
configuration (due to the initial scattering assumption). 
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Lemma 9.9. Our algorithm PEF_3+ under Ai exploration, using TZ robots in any ST ring of size 
n has a cover time in 0(n — TZ) rounds. 

Proof. Assume that initially x robots consider the clockwise direction while y robots consider the 
counter-clockwise direction. Note that initially all the robots start their execution on distinct 
nodes. Moreover, by Lemma 9.4, we know that if a tower is formed it is composed only of two 
robots. (?') Besides, by Lemma 9.3 once a tower is formed, the robots of this tower consider two 
opposite global directions. This implies that, during the whole execution, x robots consider the 
clockwise direction and y robots consider the counter-clockwise direction. 

While executing PEF_3+, a robot considers a direction (right or left) at each round. An 
isolated robot does not change the direction it considers. Therefore, by ( 7 ) and knowing that 
all the edges of a ST ring are always present, the cover time is equal to nb rounds, where nb 
is the maximal number of edges in the direction d separating two robots considering the global 
direction d in a configuration 7. The value nb is maximal when all the robots that consider the 
same global direction in 7 are on consecutive nodes in 7. In this case nb is equal to n — x + 1 for 
the robots that consider the clockwise direction in 7 and to n — y + 1 for the robots that consider 
the counter-clockwise direction in 7. Since x + y = TZ, to maximize nb, x and y must be two close 
values. Hence, the cover time of PEF__3+ is equal to n — {TZ/2) + 1 rounds. □ 

We now prove that the cover time of PEF_3+ in ST rings is moreover asymptotically optimal 
when executed in ST rings (see Lemma 9.10). To do so, we show that the cover time of any 
deterministic algorithm solving the perpetual exploration problem in ST rings of size n using 7 Z 
robots is equal to the cover time of our algorithm (proved in Lemma 9.9). 

Lemma 9.10. Any deterministic algorithm under Melioration using 7 Z robots, satisfying the 
perpetual exploration problem in ST rings of size n has a cover time in H(n — TZ) rounds. 

Proof. Assume, by contradiction, that there exists a deterministic algorithm A using TZ robots, 
solving the perpetual exploration problem in ST rings of size n, that possesses a cover time less 
or equals to r = \{n — TZ)/2\ — 1 rounds. 

Consider the execution of A in a ST ring of size n such that initially the robots are on distinct 
positions, but all are located on consecutive nodes. Call this initial configuration a block, and 
denote it 7. 

Call x one of the nodes at the extremity of the block. Call y the node at distance \(n — TZ)/2\ 
of x such that there is no robot located on the nodes between x and y. 

Since each robot can cross at most one edge at each round, this implies that each robot can 
explore at most |"(n — TZ)/2~\ — 1 different nodes in r rounds during the execution of A starting 
from 7. Note that all the nodes visited by a robot are consecutive nodes. Therefore, whatever 
the direction considered by each of the robots, none of them succeed to visit the node y during 
the r first rounds of the execution of A starting from 7. Hence there is a contradiction with the 
fact that A is deterministic algorithm using TZ robots, solving the perpetual exploration problem 
in ST rings of size n, and having a cover time of r rounds. 

This implies that there is no deterministic algorithm solving the perpetual exploration prob¬ 
lem in ST rings of size n, using TZ robots and having a cover time less or equals to \(n — TZ )/2] — 1 
rounds. Hence, since \(n — TZ) /2] — 1 is in H(n — TZ), the lemma is proved. □ 

To conclude, as explained at the beginning of this section, and thanks to the two previous 
lemmas, we can deduce the following theorem. 

Theorem 9.2. PEF_3+ is a speculative algorithm under M exp i ora uon f or the perpetual explo¬ 
ration problem with respect to ST and COT, in function of the cover time in rounds, and its 
cover time in ST rings is asymptotically optimal. 
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9.3 With Two Robots 

In this section, we study the perpetual exploration of rings of any size with two robots. We 
first prove that two robots are not able to perpetually explore COT rings of size strictly greater 
than three (refer to Theorem 9.3). Then, we provide FEF_2 (see Theorem 9.4), an algorithm 
using two robots that solves the perpetual exploration in the remaining case, i.e., COT rings of 
size three. 

9.3.1 COT Rings of Size 4 or More 

The proof of our impossibility result presented in Theorem 9.3 is based on the construction of 
an adequate sequence of evolving graphs and the application of the generic framework proposed 
in [34] (see Section 4.2 for more information about this framework). 

In order to build the evolving graphs sequence suitable for the proof of our impossibility 
result, we need the following technical lemma. 

Lemma 9.11. Any execution of a deterministic perpetual exploration algorithm in COT rings of 
size 4 or more using 2 robots satisfies: for any robot state s, there exists a time t! > 0 such that, 
if, from time 0 to a time t, the robots have not explored the whole ring, have not formed a tower, 
each robot has only visited at most two adjacent nodes, a robot r is located, in state s at time t, 
on a node u satisfying OneEdge(u , t, t + t'), then at least one robot on u leaves u at time t + t'. 

Proof. By contradiction, assume that there exists an execution £ of a deterministic perpetual 
exploration algorithm A in a COT ring Q = {Go, G \,...} (with for any i £ N, G; = ( V ., Ef)) of 
size 4 or more using 2 robots rq and r 2 satisfying: it exists a state s such that, for any integer tf 
(t’ > 0), from time 0 to a time t, (i) the exploration of the whole ring has not been done yet; ( ii) 
none of the robots have formed a tower; (Hi) at time t each robot has only visited at most two 
adjacent nodes of Q\ and ( iv) at time t one of the robots (without lost of generality, ri) is located, 
in state s, on a node u of Q satisfying OneEdge(u, t, t + t') and neither r\ nor r 2 leave u at time 
t + t'. 

Let 7Z be the set of nodes of Q visited by ri from time 0 to time t in e. Note that, at time t, 
as each robot has only visited at most two adjacent nodes, then 1 < \1Z\ < 2. Let i (resp. /) be 
the node in Q where ri is located at time 0 (resp. t). If \TZ\ = 2, let a be the node of 7Z such that 
a A h otherwise (i.e., \7Z\ = 1) let a = i. By assumption, either / = i or / is an adjacent node of 
i and in this later case a = /. 

We construct a COT ring Q’ = {G' 0 , G \,...} (with G\ = (V', E() for any i £ N) such that the 
footprint of Q l , G' = (V' , E'), contains 8 nodes in the following way. Let if be an arbitrary node 
of Q'. Let us construct nodes if, of, a ' 2 , /{, and f 2 of Q l in function of if and of nodes i , a, and / 
of Q as explained in Figure 9.1 (in which we represent a part of the footprints of Q and Q'). Note 
that this construction ensures that f[ and ff are adjacent in Q' in any case. We recall that d(x, y) 
corresponds to the distance in G' between the nodes x and y of Q. 

We denote by r(k) (resp. l(k )) the adjacent edge in the clockwise (resp. counter-clockwise) 
direction of a node k. For any j £ {0,..., t — 1}, let Ef be the set E' with the following set of 
additional constraints 1 : 

( r(if) £ Ef and l(i' 2 ) £ Ef 
I l(if ) £ Ef and r(i ' 2 ) £ Ef 
| r(a , 1 ) £ Ef and l(a' 2 ) £ Ef 
[ l{a\") £ Ef and r(a! 2 ) £ Ef 

For any j > t, let Ef be the set E 1 \ {(/{, j^)}- 

: Note that the construction of if i' 2 , af a' 2 , /{, and f 2 ensures us that there is no contradiction between these 
constraints in all cases. 


iff r(i) £ Ej 
iff l(i) £ Ej 
iff r(a) £ Ej 
iff 1(a) £ Ej 
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• If i=f and d(i, a)=l: 


• If i=f and d(i, a)=0: 


• If i=^f and d(i, a)=l: 


Figure 9.1: Construction of the nodes of G' in function of the nodes of G. 

Now, we consider the execution e' of A in Q l starting from the configuration where r\ (resp. 
7*2) is on node i\ (resp. on node i 2 ) such that the two robots have opposite chirality and that n 
has the same chirality as in e. The execution e' satisfies the following set of claims. 

Claim 1: Until time t, ri and execute the same actions in a symmetrical way in e' . 

Consider that, during the Look phase of a time j, the two robots have the same view in s'. 
The two robots have not the same chirality and A is deterministic, then, during the Move 
phase of time j, they are executing the same action in a symmetrical way (either not move 
or move in opposite directions). This implies that, at time j + 1, n and r 2 have again the 
same state. 

There are only two robots executing A in Q'. Hence, if a tower is formed, it is composed of r\ 
and T 2 - If from time 0 to time t, the robots are executing the same actions in a symmetrical 
way, then, by construction of Q' and by the way we initially placed r\ and r 2 in e', the two 
robots see the same local environment at each instant time in {0,..., t}. 

At time 0, by construction of Q' and by the way we placed r\ and r 2 in e 1 , the two robots 
have the same view. 

By recurrence and using the arguments of the two first paragraphs, we conclude that, from 
time 0 to time t, r\ and r 2 execute the same actions in a symmetrical way in e'. 
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Claim 2: Until time t, ri and r 2 never form a tower in e'. 

By construction of s', the two robots are initially at an odd distance. By Claim 1, at a time 
0 < j + 1 < t, the two robots are either at the same distance, at a distance increased of 2, 
or at a distance decreased of 2 with respect to their distance at time j. Moreover, since Q' 
possesses an even number of edges, this implies that, until time t, the robots are always at 
an odd distance from each other. 

Claim 3: Until time t, ri executes in e' the same sequence of actions as in e. 

Consider that, during the Look phase of a time j, r\ has the same view in e and in e' . As A 
is deterministic, then, during the Move phase of time j, r\ executes the same action (either 
not move, or move in the same direction) in e and in s'. This implies that, during the Look 
phase of time j + 1, r\ possesses the same state in e and in e'. 

By assumption, until time t, there is no tower in e. By Claim 2, there is no tower in e' until 
time t. Hence, in the case where r i executes the same actions in e and in e' from time 0 to 
time t, r\ sees the same local environment in e and in e' until time t (by construction of Q' 
and the initial location of r\ in e'). 

At time 0, ri has the same view in e and in e' (by construction of Q’ and the initial location 
of r\ in e'). 

By recurrence and using the arguments of the two first paragraphs, we conclude that, from 
time 0 to time t, r i executes the same actions in e and in e'. 

Claim 4: At time t, ri and r 2 are on two adjacent nodes in e’ and are both in state s. 

By Claims 1 and 3, and by construction of Q’ , we know that at time t, r i is on node /{ while 
?’2 is on node f 2 . These nodes are adjacent by construction of Q'. 

By Claim 1, as ri and ri have opposite chirality, they have the same state at time t in e'. 

By Claim 3, r\ is in the same state at time t in e and in e'. Since ri is in state s at time t in 
£ by assumption, we have the claim. 

By construction of Q' , /{ (resp. f 2 ) satisfies the property OneEdge(f[,t , +oo) (resp. OneEdge(f 2 , 
t, +oo)). Then, by assumption, r\ (resp. r 2 ) does not leave node f[ (resp. f 2 ) after time t. As 
Q' counts 8 nodes, we obtain a contradiction with the fact that A is a deterministic algorithm 
solving the perpetual exploration problem for COT rings using two robots. □ 

Theorem 9.3. There exists no deterministic algorithm satisfying the perpetual exploration prob¬ 
lem under M. exp i oration in COT rings of size 4 or more using two robots. 

Proof. By contradiction, assume that there exists a deterministic algorithm A satisfying the 
perpetual exploration specification in a deterministic way in any COT ring of size 4 or more 
using two fully-synchronous robots r\ and n- 

Consider the COT graph Q = {Go, G \,...} whose footprint G is a ring of size 4 or more and 
such that Vi £ N, Gj = G. 

Consider three nodes u, v, and w of Q, such that node v is the adjacent node of u in the 
clockwise direction, and node w is the adjacent node of v in the clockwise direction. For any node 
x of Q denote respectively by e xr and e x i the clockwise and the counter-clockwise adjacent edges 
of x. Note that e^^ — and e xx — euji. 

A is a deterministic algorithm solving the perpetual exploration problem in COT rings of size 
4 or more using 2 robots, hence, by Lemma 9.11, any execution of A satisfies: for any robot state 
s, there exists a time t' > 0 such that, if, from time 0 to a time t, the robots have not explored 
the whole ring, have not formed a tower, each robot has only visited at most two adjacent nodes, 
a robot is located, in state s at time t, on a node x satisfying OneEdge(x, t, t + t') then at least 
a robot located on node x leaves x at time t + t'. Let Ta be the largest integer t! whatever the 
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Figure 9.2: Construction of Q 1 and evolution of the robots in Q~ until time tj, for j = {i,i + l,i + 
2, z + 3, z + 4}. 


states considered by the robots executing A. Since the states reached by the robots executing A 
are among a finite set of values, Ta exists and is bounded. 

Let Q' be G\{({e u i,e ur }, 7 ~a)}- Let e be the execution of A in Q' starting from the configura¬ 
tion where r\ (resp. r-i) is located on node u (resp. v). 

Our goal is to construct a sequence of COT rings denoted (Gw) men such that Go = G' and, 
for any i > 0, (z) Gi exists for a given i £ N multiple of 4; (zz) until time tj, the two robots never 
form a tower in £j ((tm)meN being a strictly increasing sequence with to = 0, and cj being the 
execution of A in Gi starting from the same configuration as e); (in) until time tj, r\ (resp. r 2 ) 
has only visited at most two nodes among {u, u} (resp. {u, w}) in £f, and (iv) at time tj, n (resp. 
r 2 ) is located on node v (resp. w). First, we show in the next paragraph (items 1 to 8 ) that, if 
some such Gi exists and, moreover, ensures the existence of an integer t( > 0 such that until time 
tj + tj + 1 the conditions (ii) and (in) are satisfied in £j, then we can construct Gi+ 1 , Gi+ 2 , Gi+ 3 
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and Gi+4 as shown in Figure 9 . 2 . We prove, after that, that our construction implies the well 
definition of (£ m ) me N- 

1 . If, at time t t , the configuration 7* is such that the robot r\ is on node u and has none of its 
adjacent edge present while r2 is on node v and has only its adjacent edge e vr present in £*, 
then, since Gi is a COT ring and satisfies the conditions (ii) and (Hi) until time ti , we use 
Lemma 9.11 to exhibit the smallest time t\ > 0 such that, if the configuration 7, lasts from 
time ti to time ti + t'+ then r2 moves at time L + t(. By definition t( < Ta- In £*, at time 
ti + t'i + 1, V2 is on node w (since only its adjacent edge e vr is present at time ti + t() and r\ 
is still on node u. Therefore, the conditions (ii) and (Hi) are still satisfied in £* until time 
ti + t( + 1. 

We then define Gi +1 such that Gi +1 and Gi have the same footprint and Gi+i = Gi T++t'. 
(G\{({e u i,e w i,e wr },{ti + t' i + 1,..., U + t( +1 + Ta})})- Note that Gi +1 is a COT ring (since 
it is indistinguishable from G after time ti + t( + 1 + TT- 

Gi and Gi+i are indistinguishable for robots until time f* + t\. This implies that, at time 
U + t\ + 1 , r 1 (resp. r2) is on node u (resp. w) in £* + i. Moreover, the conditions (ii) and 
(Hi) are satisfied in £* + 1 until time t? + t! i + 1. 

2 . Let ti+ 1 = ti + t( + 1 . 

3 . Using similar arguments as in Item 1 , if, at time L+i, the configuration 7*41 is such that the 
robot V2 is on node w and has none of its adjacent edge present while r 1 is on node u and has 
only its adjacent edge e ur present in £* + i, we prove that there exists a time Ta > t[+i > 0 
such that, if the configuration 7*41 lasts until time ti+\ + t' i+1 , then, at time t t +\ + t' i+l + 1, 
?’i is on node v, ?’2 is on node w and the conditions (ii) and (Hi) are satisfied in 1 until 
time t i+ 1 + t' i+l + 1. 

We then define Gi+ 2 such that Gi+ 2 and Gi have the same footprint and Gi+ 2 = Gi+\®t i+ \+t '. +1 
{G\{({e w l, e wr }, {k+i + t' i+ 1 + 1 , ..., t i+ 1 + t' i+ 1 + 1 + X4})}). Note that Gi+2 is a COT ring 
(since it is indistinguishable from G after time ti+ 1 + t ' i+1 + 1 + TT)- 

Gi+i and Gi+2 are indistinguishable for robots until time ti+\ + t(, l . This implies that, at 
time t-i+i + t' i+l + 1 , ri (resp. ?’2) is on node v (resp. w) in Ei+2- Moreover, the conditions 
(ii) and (Hi) are satisfied in £j + 2 until time L+i + t' i+l + 1 . 

4 . Let ti- 1-2 = U +1 + + 1 . 

5 . Using similar arguments as in Item 1 , if, at time ti+ 2, the configuration ^i+2 is such that the 
robot V2 is on node w and has none of its adjacent edge present while r\ is on node v and has 
only its adjacent edge e v i present in £*+2, we prove that there exists a time Ta t ' i+2 > 0 
such that, if the configuration 7*4.2 lasts until time ti+2 + 1 ( +2 , then, at time ti+2 + t' i+2 + 1, 
?’i is on node u, r2 is on node w and the conditions (ii) and (Hi) are satisfied in £*42 until 
time t i+ 2 + t ' i+2 + 1. 

We then define Gi+:s such that Gi+3 and Gi have the same footprint and Gi +3 = Gi+2®t o+t' 

4 '^ ' i+2 

, 6 wr , C wr }, {tj42+t'+ 2 +l, • • •, ti+2+t' i+ 2+l+TA})})- Note that Gi+3 is a COT ring 
(since it is indistinguishable from G after time t l+2 + t ' i+2 + 1 + TT)- 

Gi+2 and Gi+3 are indistinguishable for robots until time ti+2 + ^42- This implies that, at 
time ti+2 + t' i+ 2 + 1 ) r i (resp. r2) is on node u (resp. vj) in £*43. Moreover, the conditions 
(ii) and (Hi) are satisfied in £*43 until time ti+2 + t[+2 + 1 - 

6. Let ti+3 = ti+2 + ^42 + 1 - 

7 . Using similar arguments as in Item 1 , if, at time U+3, the configuration 7*43 is such that the 
robot 77 is on node u and has none of its adjacent edge present while ?’2 is on node w and has 
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only its adjacent edge e w i present in e^+3, we prove that there exists a time T_a > t ' i+3 > 0 
such that, if the configuration 74+3 lasts until time ti +3 + t ' i+3 , then, at time L +3 + t' i+3 + 1, 
r\ is on node u, r2 is on node v and the conditions (ii) and (in) are satisfied in £j +3 until 
time t i+ 3 + t ' i+3 + 1. 

We then define Gi +4 such that Gi +4 and Gi have the same footprint and Gi+4 = Gi+ 3 ®t i+ 3 +t'- 3 
(G\{({e u i, e ur}, {U+ 3 + i( +3 + 1 , ■ • •, t i+ 3 +1' +3 + 1 + 734 .})})- Note that Gi+4 is a COT ring 
(since it is indistinguishable from Q after time fi +3 + t' i+3 + 1 + 7 4 ). 

< 7 i +3 and C/./+4 are indistinguishable for robots until time tj+ 3 + t( +3 . This implies that, at 
time ti- 1_3 + t( +3 + 1 , 77 (resp. 77) is on node u (resp. w) in £j + 4. Moreover, the conditions 
(m) and (in) are satisfied in £j + 4 until time L +3 + t' +3 + 1. 

8. Let L+4 = ij+3 + t' i+3 + 1 . 

Note that Go trivially satisfies assumptions (i) to (iv) for to = 0. Also, given a Gi with i 6 N 
multiple of 4 , Gi+ 4 exists and we proved that it satisfies assumptions (ii) to (iv). In other words, 
(G n )ne N is well-defined. 

We define the evolving graph Q w such that Guj and Go have the same footprint, and for all 
i G N, Guj shares a common prefix with Gi until time fi + t[. As the sequence (t m + t / m )meN is 
increasing by construction, this implies that the sequence converges to Gw 

Note that, for any edge of Gw, the intervals of times where this edge is absent (if any) are finite 
and disjoint. This implies that all the edges of Glo are infinitely often present. Therefore, Gw is a 
COT ring. 

Applying the theorem of [ 34 ], we obtain that, until time ti + t[, the execution of A in Gu is 
identical to the one in Gi- This implies that, executing A in Gw (whose footprint is a ring of size 
4 or more), 77 and r2 only visit the nodes among {v,w,x}. This is contradictory with the fact 
that A satisfies the perpetual exploration specification in COT rings of size 4 or more using 2 
robots. □ 

9.3.2 COT Rings of Size 3 

In this section, we present PEF_ 2 , a deterministic algorithm solving the perpetual exploration 
in COT rings of size 3 with two robots. 

This algorithm works as follows. Each robot disposes only of its dir variable. If at a time t, 
a robot is isolated on a node with only one adjacent edge, then it points to this edge. Otherwise 
(i.e., none of the adjacent edge is present, both adjacent edges are present, or the other robot is 
present on the same node), the robot keeps its current direction. 

Algorithm 9.2 PEF 2 

1: Robots :: \ExistsOtherRobotsOnNode() A ExistsEdge(dir, current) A \ExistsEdge(dir, current) 

—» dir := dir 


Theorem 9 . 4 . PEF_2 satisfies the perpetual exploration problem under M exp i ora tion in COT rings 
of 3 nodes using 2 robots. 

Proof. Consider any execution of PEF_2 in any COT ring of size 3 with 2 robots. By the 
connected-over-time assumption, each node has at least one adjacent edge infinitely often present. 
This implies that any tower is broken in finite time (as robots meet only when they consider op¬ 
posite directions and move as soon as it is possible). Two cases are now possible. 

Case 1 : There exists infinitely often a tower in the execution. 

Note that, if a tower is formed at a time t, then the three nodes have been visited between 
time t — 1 and time t. Then, the three nodes are infinitely often visited by a robot in this 
case. 
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Case 2 : There exists a time t after which the robots are always isolated. 

By contradiction, assume that there exists a time t' such that a node u is never visited after 
t'. As the ring has 3 nodes, that implies that, after time m,ax{t,t'}, either the robots are 
always switching their position or they stay on their respective nodes. 

In the first case, during the Look phase of each time greater than max{t, f / }, the respective 
variables dir of the two robots contain the direction leading to u (since it previously moves 
in this direction). As at least one of the adjacent edges of u is infinitely often present, a 
robot crosses it in a finite time, that is contradictory with the fact that u is not visited after 

a. 

The second case implies that both adjacent edges to the location of both robots are always 
absent after time t (since a robot moves as soon as it is possible), that is contradictory with 
the connected-over-time assumption. 

In both cases, PEF _2 satisfies the perpetual exploration specification. 


□ 


9.4 With One Robot 

This section leads a similar study as the one in Section 9.3 but in the case of the perpetual 
exploration of rings of any size with a single robot. In this section we prove a negative result since 
Theorem 9.5 states that a single robot is not able to perpetually explore COT rings of any size 
(i.e., of size 3 or more). 

Similarly to the previous section, the proof of our impossibility result presented in Theorem 

9.5 is based on the construction of an adequate sequence of evolving graphs and the applica¬ 
tion of the generic framework proposed in [ 34 ] (see Section 4.2 for more information about this 
framework). 

In order to build the evolving graphs sequence suitable for the proof of our impossibility result, 
we need the following trivial lemma that states that if the robot has only one adjacent present 
edge during a long time then, in finite time, it will move. Trivially, if this was not the case and 
if the adjacent missing edge of the robot is actually an eventual missing edge, then the perpetual 
exploration cannot be solved by the robot. 

Lemma 9 . 12 . Any execution of a perpetual exploration algorithm inCOT rings of size 3 or more 
using one robot r satisfies: for any robot state s, there exists a time t' > 0 such that if r is located 
on a node u, in state s at a time t, and satisfying OneEdge(u,tT + t'), then r leaves u at time 
t + tf. 

Theorem 9 . 5 . There exists no deterministic algorithm satisfying the perpetual exploration prob¬ 
lem under JHexpioraUon in COT rings of size 3 or more using a single robot. 

Proof. By contradiction, assume that there exists a deterministic algorithm A satisfying the 
perpetual exploration specification in any COT ring of size 3 or more using a single robot r. 

Consider the COT graph Q = {Go, G\,.. .} whose footprint G is a ring of size 3 or more and 
such that Vi G N, G * = G. 

Let u be a node of Q and let v be the adjacent node of u in the clockwise direction. For any 
node x of Q denote respectively by e xr and e x i the clockwise and the counter-clockwise adjacent 
edges of x. 

Let Q' be ^\{({e ur }, N)}. Let e be the execution of A on Q' starting from the configuration 
where r is located on node u. 

Our goal is to construct a sequence of COT rings denoted ( G m )m£ N such that Qq = Q' and, 
for any i > 0, only nodes among {u, v} have been visited until time L in e* (the execution of A in 
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Figure 9 . 3 : Construction of Gi+i from Gi- 


Gi starting from the same configuration as e), (t m )meN being a strictly increasing sequence with 
t o = 0 . First, we show in the next paragraph that, if some such Q t exists and, moreover, ensures 
the existence of an integer t[> 0 such that until time t j + t\ + 1 only nodes among {it, v} have 
been visited in £j, then we can construct Gi+i as shown in Figure 9 . 3 . We prove, after that, that 
our construction guarantees the existence of such a t[, implying the well definition of (G m )m£N- 

Since Q t is a COT ring, and since A is a deterministic algorithm solving the perpetual ex¬ 
ploration problem in COT rings of size 3 or more using a single robot, when the configuration 
7 i at time L is such that there is exactly one adjacent edge present to the location of r, we use 
Lemma 9.12 to exhibit the smallest integer t{ > 0 such that if the configuration 7 \ last from time 
ti to time ti + t[, then r moves at time U + t[. 

In the following we show how we construct the dynamic graph Qi+\ in function of Q t , ti and 
f'. As we assume that in Q % , until time ti + t[ + 1 , only nodes among {it,u} have been visited, 
then the following cases are possible. 

1. if, at time ti + t\ + 1 in Q x , r is on node v then let E t = {e vr }. 

2. if, at time t t + f ■ + 1 in Q % , r is on node u then let Ei = {e u i}. 

For each case, we define G1+1 such that Gi+i and G% have the same footprint and Qi+\ = 
G% *S> ti+ti ( G\{(Ei , {ti + t'i + l,..., +00})}). 

Gi + 1 is a COT ring since it possesses only one eventual missing edge. Note that Gi and Gi+i 
are indistinguishable for r until time ti + t\. This implies that, at time t, + t[, r is on the same 

node in e, and in £j+i- By construction of t! % , r moves at time t, + t[ in £j+i. Moreover, even if r 

moves during the Move phase of time ti + t[, at time ti + t^ + l, it is still on nodes among {u, u}, by 
assumption on Gi and construction of Gi+\ , since from time ti to time ti +1 [ the edges permitting 
r to go on a node other than the nodes among {u, u} are missing. 

Let ti + 1 = ti + t'i + 1 . Then we can construct recursively each dynamic ring of ( Gm)m.eN by 
applying the argues above on all the possible configurations reached by the movement of r at time 
ti+ 1 + t ' i+ 1 + 1 on Gi+ 1- 

Note that the recurrence can be initiated, since Go exists, is a COT ring and from time to = 0 
to time to + t ' 0 + 1 only nodes among { u , v} have been visited. In other words, (f/ m )meN is 
well-defined. 
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We can then define the evolving graph Gw such that Gw and Go have the same footprint and 
for all i G N, Gw shares a common prefix with Q t until time tj + f'. As the sequence (t m + 
is increasing by construction, this implies that the sequence (Gm.)rneN converges to Gw- 

Note that Gu> is a COT ring. Indeed, there is at most one eventual missing edge in Gw- 
Applying the theorem of [ 34 ], we obtain that, until time ti + t[, the execution of A on Gw is 
identical to the one on Gi ■ This implies that, executing A on Gw (whose footprint is a ring of 
size 3 or more), r only visits the nodes among {u, v}. This is contradictory with the fact that 
A satisfies the perpetual exploration specification on COT rings of size 3 or more using a single 
robot. □ 


9.5 Summary 

We analyzed the computability of the perpetual exploration problem in highly dynamic rings 
(i.e., in COT rings). We proved that three (resp., two) robots with very few capacities are 
necessary to solve the perpetual exploration problem in COT rings that include strictly more 
than three (resp., two) nodes. For the completeness of our work, we provided two algorithms: 
one using two robots exploring three nodes, and one for three or more robots moving among at 
least four nodes. These two algorithms allow to show that the necessary number of robots is also 
sufficient to solve the problem. 

The cover time of any exploration algorithm in COT graphs is unbounded. However, our algo¬ 
rithm using three or more robots is speculative: even if its cover time is unbounded in COT rings, 
it is bounded in ST rings. More precisely, its cover time is asymptotically optimal in ST rings. 
Therefore, our algorithm solves the perpetual exploration problem in highly dynamic environ¬ 
ments and it solves it in a very efficient way when being executed in static environments. 

Our study is the first one dealing with the exploration problem in COT rings. Moreover, it is 
the first one considering the speculative aspect of algorithms in robot networks. 
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The exploration problem has never been studied while considering robots subject to transient 
faults (arbitrary faults such that there exists a time from which these faults no longer occur). In 
this chapter, we address the perpetual exploration problem in COT rings using robots that may 
be subject to transient faults. 

More precisely, in this chapter, we characterize the number of robots (possibly subject to tran¬ 
sient faults) necessary to solve the perpetual exploration problem in COT rings. Depending on 
these results, we describe some algorithms showing that the necessary number of self-stabilizing 
robots (i.e., of robots tolerating transient faults) is also sufficient to solve the perpetual explo¬ 
ration problem in COT rings. Such algorithms are called self-stabilizing algorithms [ 73 ]. 

Similarly as in the previous chapter, even if it is possible to solve the perpetual exploration 
problem in COT rings, the cover time of such algorithms is necessarily unbounded (refer to 
Section 8 . 3 ). This motivates the conception of a speculative algorithm to solve the perpetual 
exploration problem using robots that may be subject to transient faults. Indeed a speculative 
algorithm is an algorithm that must satisfy its requirements (i.e., the specification of the problem 
considered) in any execution in which it is susceptible to be executed but also that must be 
very efficient for the executions that are more likely to happen. In this chapter we consider only 
ST graphs (in addition to COT graphs) to prove the speculative aspect of our algorithm, i.e., we 
prove that the cover time of our algorithm is bounded (it has a cover time in @(n) rounds) and is 
asymptotically optimal when executed in ST graphs. 

The results presented in this chapter have been published in SSS 2016 [ 27 ], and in Theoretical 
Computer Science [ 28 ]. 
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Number of Robots 

Size of Rings 

Results 

3 

> 4 

Possible (Theorem 10 . 3 ) 

2 

> 3 

Impossible (Theorem 10 . 1 ) 

= 3 

Possible (Theorem 10 . 5 ) 

1 

> 2 

Impossible (Theorem 10 . 2 ) 


Table 10 . 1 : Overview of the results. 


Results. The main contribution of this chapter is to prove that the necessary and sufficient 
numbers of robots for the perpetual exploration of highly dynamic rings exhibited in the previous 
chapter also hold in a self-stabilizing setting (see Table 10.1 for a summary of our results), at the 
price of the loss of anonymity of robots. Note that this price is unavoidable in the self-stabilizing 
setting since a classical symmetry breaking argument shows that it is impossible to solve the 
exploration problem with any number of anonymous robots. Indeed, a self-stabilizing algorithm is 
defined by Dijkstra [ 73 ] as an algorithm that recovers in a finite time a correct behavior regardless 
of the initial configuration of the system (which captures the effect of transient faults in the 
system). Hence, to be self-stabilizing, an exploration algorithm must tolerate any initial positions 
of robots. In particular, all robots may start on the same node. If the robots are anonymous, 
deterministic, and execute the same algorithm, no algorithm can prevent them to act as only one 
robot which is unable to perpetually explore a COT ring of size 3 and more (refer to Section 9 . 4 ). 

Section 10.1 details the state of the art about self-stabilization. In Section 10 . 2 , we present 
two impossibility results establishing that at least two (resp. three) self-stabilizing robots are 
necessary to perpetually explore COT rings of size greater than 3 (resp. 4 ) (even if robots are not 
anonymous). Note that these necessity results are not implied by the ones of the previous chapter 
(that focuses on anonymous robots). Then, Section 10.3 presents and proves the correctness 
of an algorithm solving the perpetual exploration problem in COT rings of size 4 and more 
in a self-stabilizing way with three robots. Section 10.4 proves the speculative aspect of this 
algorithm: even if its cover time in COT rings is unbounded, it is bounded (in @(n) rounds) and 
asymptotically optimal in ST rings. In Section 10 . 5 , we present and prove the correctness of an 
algorithm showing the sufficiency of two robots to perpetually explore in a self-stabilizing manner 
COT rings of size three. Finally, Section 10.6 concludes the chapter. 

In this chapter, we consider a system made of 1 Z = 3 robots evolving in COT rings. In addition 
to the common assumptions made on robots all along the chapters of this thesis (see Section 3 . 2 ), 
we assume that the robots have not the same chirality. The robots have no prior knowledge about 
the graph in which they evolve nor on the robots. They are unable to directly communicate with 
each other by any means. They are endowed with strong local multiplicity detection meaning 
that they are able to detect the exact number of robots located on their current node. They 
are identified (each of them has a distinct identifier in a finite set ID). The robots know only 
their own identifier, they do not know the identifier of the other robots. They have persistent 
memory that is divided in two distinct areas: a corruptible one containing variables and an 
incorruptible one containing their algorithm and their constants (as their identifier). Call this 
model Mself-stabilizing exploration (also lefei to Figure 3 . 5 ). 

For the algorithms presented in this chapter, the variable dir of the robots can only take the 
values right or left (i.e., the variable dir cannot be equal to _L). 
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10.1 Self-Stabilization 

10.1.1 Definition 

In the previous chapter, we consider that the robots always execute correctly their algorithm. 
However, it is well known that entities are not reliable: there exist periods in the execution when 
some entities do not execute correctly their algorithm, i.e., there exists faulty entities. 

There are multiple kinds of faults classified according to three criteria [138]: 

Span of the fault: a fault may be local (only one entity is faulty), partial (some of the entities 
but not all are faulty) or global (the whole system is impacted by the faults). 

Nature of the fault: a fault induces an incorrect behavior which indicates its nature. Among 
the possible incorrect behavior, there is crash (the entity stops to perform its algorithm) 
[82], omission (the entity stops to send or to receive messages) [60], Byzantine (arbitrary 
fault) [119]... 

Duration of the fault: a fault may be either permanent (there exists a time from which this 
fault always exists) or transient (there exists a time from which the fault does not occur 
anymore) or intermittent (the fault occurs infinitely often). 

To specify a fault, each of the aforementioned criteria must be precised. 

In this chapter, we consider that the robots may be subject to arbitrary (any span and any 
nature) transient faults. Hence, as indicated, there exists a time from which all the entities are 
never subject to fault anymore. 

Once all the entities stop to be faulty, it is convenient if the system succeeds, without an 
external help, to find back a correct behavior. Dijkstra [73] introduced in 1974 self-stabilizing 
algorithms that recover in a finite time a correct behavior regardless of the initial configuration 
of the system (which captures the effect of transient faults in the system). 

A self-stabilizing algorithm can be defined formally as follows (refer to Figure 10.1 for an 
illustration of an execution of a self-stabilizing algorithm). 

Definition 10.1 (Self-stabilizing algorithm). An algorithm A is self-stabilizing for a problem V 
under a model M. if and only if it ensures that, for any configuration 70 , the execution of A under 
M. starting from 70 contains a configuration 7 , such that the execution of A under M starting 
from 7 i satisfies the specification of V. 

In other words, a self-stabilizing algorithm must guarantee two main properties: 

Closure: there exists some configurations from which any execution of the algorithm satisfies 
the specification of the problem considered. 

Convergence: starting from any configuration, any execution of the algorithm reaches, in finite 
time, a configuration that satisfies the closure property. 

Since a self-stabilizing algorithm must be able to start its execution from any arbitrary con¬ 
figuration, this implies that a self-stabilizing algorithm using robots must tolerate both arbitrary 
initial states of the robots and arbitrary initial positions of the robots (in particular, robots may 
form towers in the initial configuration). 

Note that being self-stabilizing imposes to tolerate arbitrary initialization of the variables, but 
it does not prevent the entities to possess constant values that cannot be corruptible by transient 
faults contrary to variables. 

We give below the formal definition of a self-stabilizing algorithm using robots moving in 
evolving graphs. 
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Figure 10.1: Example of an execution of a self-Stabilizing algorithm. 


Definition 10.2 (Self-stabilizing algorithm using robots in evolving graphs). An algorithm A is 
self-stabilizing for a problem V under a model M in a class of evolving graphs C if and only if it 
ensures that, for any configuration 70 , the execution of A under j\4 in any evolving graph Q E C 
starting from 70 contains a configuration 7 \ such that the execution of A under Ai in Q starting 
from 7 i satisfies the specification ofV. 

Even if self-stabilization permits to tolerate in an autonomous way very severe faults, during 
the time when the system is stabilizing there is no guarantee concerning the specification of the 
problem considered. Moreover, another drawback of this mechanism is that it is not possible for 
the robots to know when the system is stabilized: it is necessary to have a global view of the 
system to determine whether it is stabilized or not. 

10.1.2 State of the Art 

Although there exists a huge literature on self-stabilization in classical distributed systems, 
these work fall out of the scope of this thesis and we refer the interested reader to some reviews 
[73, 76, 138]. While considering robots, there are few articles focusing on self-stabilizing algo¬ 
rithms [70, 71, 129, 44], Dieudonne and Petit [70] give a self-stabilizing probabilistic algorithm 
for scattering robots in the plane. Clement et al. [44] provide self-stabilizing probabilistic algo¬ 
rithms for the gathering and scattering problems using robots moving in the plane. Ooshita and 
Tixeuil [129] present probabilistic self-stabilizing algorithms for the gathering and a particular 
formation pattern problems using robots moving in undirected anonymous rings. Dieudonne and 
Petit [71] give a self-stabilizing deterministic algorithm to solve the gathering problem in the 
plane for an odd number of robots. 

There exist multiple studies on the exploration problem in discrete static environment using 
oblivious robots [83, 84, 42, 64, 21]. These articles deal then with the arbitrary initial states of 
the robots since the robots do not store variables. However, none of them are self-stabilizing since 
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they impose special initial positions to the robots: initially there is at most one robot in each node 
of the graph. Moreover, Ooshita and Tixeuil [129] indicate that it is impossible to conceive a self- 
stabilizing (either deterministic or probabilistic) algorithm for the exploration with termination 
problem when robots are uniform, oblivious, anonymous, and not able to communicate directly. 

There also exist some articles on exploration in discrete static environment using robots with 
memory [74, 97, 98]. However none of them is self-stabilizing: they do not tolerate arbitrary 
initialization of the variables. 

When the methodology to explore a discrete dynamic environment is to use a random walk, 
like this is done by Avin et al. [11], then the algorithms are self-stabilizing. Indeed, the robots 
compute randomly at each instant time which is the next node to visit; hence the robots do not 
store any variable and they can be initially at any position in the graph. Therefore, there exist 
self-stabilizing probabilistic algorithms solving the exploration problem for robots evolving in 
discrete dynamic environment. Hence, this is also the case for robots evolving in discrete static 
environment. 

Finally, among the articles dealing with deterministic exploration in discrete dynamic envi¬ 
ronment [89, 105, 106, 104, 125] (refer to Section 8.2 for more details about these articles) all 
consider robots endowed with memory and none of them are self-stabilizing. 

To sum up, there is no self-stabilizing deterministic algorithm in the state of the art solving 
the exploration problem for robots evolving in discrete either static or dynamic environment. 

10.2 Necessary Number of Robots 

This section is devoted to the proof of the necessity of two (resp. three) self-stabilizing iden¬ 
tified robots to perform perpetual exploration of highly dynamic rings of size at least 3 (resp. 4). 
To reach this goal, we provide two impossibility results. 

First, we prove (see Theorem 10.1) that two robots with distinct identifiers are not able to 
perpetually explore in a self-stabilizing way COT rings of size greater than 4. Then, we show that 
we can borrow arguments from the previous chapter (see also [29]) to prove Theorem 10.2 that 
states that only one robot cannot complete the self-stabilizing perpetual exploration of COT rings 
of size greater than 3. 

10.2.1 Highly Dynamic Rings of Size 4 or More 

The proof of Theorem 10.1 is based on the construction of an adequate sequence of evolving 
graphs and the application of the generic framework proposed in [34] (see Section 4.2 for more 
information about this framework). 

In order to build the evolving graphs sequence suitable for the proof of our impossibility 
result, we need the following technical lemma. 

Lemma 10.1. Any self-stabilizing deterministic perpetual exploration algorithm in COT rings 
of size 4 or more using 2 robots r\ and r 2 with distinct identifiers satisfies: for any states si and 
S 2 , for any distinct identifiers id ri and id r2 , it exists an integer t! (t' > 0) such that if r\ (resp. 
r 2 ) with identifier id ri (resp. id r2 ) is on node u\ (resp. U 2 ) in state si (resp. S 2 ) at a time t and 
there exists only one adjacent edge to each position of the robots continuously present from time 
t to time t + t!, then r\ and/or r 2 moves at time t + t'. This lemma holds even if the robots have 
the same chirality. 

Proof. By contradiction, assume that there exists a self-stabilizing deterministic perpetual ex¬ 
ploration algorithm A in COT rings of size 4 or more using 2 robots r\ and r 2 satisfying: there 
exist two states -Si and S 2 , and two distinct identifiers id ri and id r2 such that, for any integer t' 
(tf > 0 ), r\ (resp. r 2 ) with identifier id ri (resp. id r2 ) is on node u\ (resp. U 2 ) in state si (resp. 
S 2 ) at a time t and there exists only one adjacent edge to each position of the robots continuously 
present from time t to time t + t' and none of the robots move at time t + t'. 
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Note that the existence of such states and identifiers is not contradictory with the definition 
of A if this algorithm has the ability to avoid that robots ever reach such states in each of its 
execution. In the following, we are going to prove that it is not the case. 

Let G be a ring of size 4 or more. Let Q = {Go, G\,.. .} be a COT ring such that Vi, Gi = G. 
Consider the evolving graph Q' such that Q' = f?\{({e}, {0, > .. ,+oo})}, where e = {u,v} is an 
arbitrary edge of G. Note that G' is a COT ring, since it has only one eventual missing edge. 

If u\ = U 2 , then we define the following configuration 7 in Q': 77 (resp. ?’ 2 ) with identifier id ri 
(resp. idr 2 ) is on node u (resp. u ) in state si (resp. S 2 )- 

If u\ A U 2 , then we define the following configuration 7 in Q': 77 (resp. ?’ 2 ) with identifier id ri 
(resp. id r2 ) is on node u (resp. v) in state si (resp. S 2 ). 

As A is self-stabilizing, there exists an execution e of A in Q' starting from 7 . In both cases 
above, by construction, there is only one adjacent edge to each position of the robots continuously 
present from time 0 to + 00 , and 77 and 77 are respectively in state si and S 2 at time 0. Then, by 
assumption, 77 and 7*2 do not leave their respective nodes in e. As Q' counts 4 nodes or more, we 
obtain a contradiction with the fact that A is a self-stabilizing algorithm solving deterministically 
the perpetual exploration problem for COT rings of size 4 or more using two robots possessing 
distinct identifiers. □ 

Theorem 10.1. There exists no deterministic self-stabilizing algorithm satisfying the perpetual 
exploration problem under M.self-stabilizing exploration in COT rings of size 4 or more with two 
robots. 

Proof. By contradiction, assume that there exists a deterministic algorithm A satisfying the 
perpetual exploration specification in a self-stabilizing way in any COT ring of size 4 or more 
using two robots 77 and 77 possessing distinct identifiers. 

Consider the COT graph G = {Go, Gi,...} whose footprint G is a ring of size 4 or more and 
such that Vi €E N, G* = G. 

Consider four nodes u, v, w and x of Q, such that node v is the adjacent node of u in the 
clockwise direction, w is the adjacent node of v in the clockwise direction, and x is the adjacent 
node of w in the clockwise direction. We denote respectively e vr and e v i the clockwise and counter¬ 
clockwise adjacent edges of v, e wr and e w i the clockwise and counter-clockwise adjacent edges of 
w, and e xr and e x i the clockwise and counter-clockwise adjacent edges of x. Note that e vr = e w i, 
and e wr — &xl- 

Let Q' be ^\{({e„;}, N)}. Let e be the execution of A in Q' starting from the configuration 
where 77 (resp. r^) is located on node v (resp. w). 

Our goal is to construct a sequence of COT rings denoted (Gm)meN such that Go = Q' and, for 
any i > 0 , only nodes among {u, w, x} have been visited until time L in £3 (the execution of A in 
Gi starting from the same configuration as e), (t m ) me pj being a strictly increasing sequence with 
to = 0 . First, we show in the next paragraph that, if some such Gi exists and, moreover, ensures 
the existence of an integer t[> 0 such that until time t t + ft + 1 only nodes among {r>, w, x} have 
been visited in £j, then we can construct Gi+i as shown in Figure 10 . 2 . We prove, after that, that 
our construction guarantees the existence of such a tf, implying the well definition of (G m )m£N- 

Since Gi is a COT ring, and since A is a deterministic algorithm solving the perpetual explo¬ 
ration problem in a self-stabilizing way in COT rings of size 4 or more using 2 robots possessing 
distinct identifiers, when the configuration 7 * at time t t is such that there is exactly one adjacent 
edge present to the location of each of the two robots, we use Lemma 10.1 to exhibit the smallest 
integer t[ > 0 such that if the configuration 73 lasts from time L to time t, + t' t . then one or both 
of the robots move at time ti + t(. (*) Similarly, when the configuration 7 \ at time t t is such that 
there is only one missing edge, and that only one robot is adjacent to this missing edge, then we 
can also exhibit the smallest integer t\ > 0 such that at time ti + t[ at least one of the robots 
moves. Indeed, if this configuration lasts from time L; to time + 00 , Gi is a COT ring, and if none 
of the robots move in this configuration, the perpetual exploration cannot be solved. Therefore 
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Figure 10.2: Construction of Gi+± from Q. L . 
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such an integer t\ exists. Let T 4 be the largest integer t\ whatever the states and identifiers con¬ 
sidered by the robots executing A. Since the states reached by the robots executing A and the 
identifiers are among a finite set of values, T 4 exists and is bounded. 

In the following we show how we construct the dynamic graph Gi+i in function of Gi, t-i and 
f'. As we assume that in Gi, until time t* + t! i + 1 , only nodes among {u, w, x} have been visited, 
then the following cases are possible. If the two robots are on two distinct nodes in Gi at time 
ti + t'i + 1 then: 

1 . if, at time ti + + 1 in Gi, one of the robots is on node v and the other robot is on node w 

then let E{ = {e v i}. 

2 . if, at time ti + t\ + 1 in Gi, one of the robots is on node w and the other robot is on node x 
then let Ei = {e^}. 

3. if, at time L; + t[ + 1 in Gi, one of the robots is on node v and the other robot is on node x 
then let E x = {e^e^}. 

If the two robots are on the same node in Gi at time ti + t^+1 then: 

4. if, at time t, t + t■ + 1 in Gi, the two robots are on node v, then let Ei = {e v i}. 

5. if, at time ti + t\ + 1 in Gi, the two robots are on node w then let E t = {e^}. 

6 . if, at time t * + t[ + 1 in Gi, the two robots are on node x, then let Ei = {e xr }. 

For each case, we define Q\ such that G'i and Gi have the same footprint and G[ — Gi 
(G\{{Ei, {ti+t[ +1 ,..., ti+t'i+l+TjCi )}). Note that G[ is a COT ring since it is indistinguishable 
from G after ti + t[ + 1 + T 4 . We can then apply either Lemma 10.1 or (*) to find the smallest 
integer L” (with Ta > U” > 0) such that at time ti + t\ + 1 + L” at least one of the robots moves 
in G'i■ By definition of T 4 , ti" exists. Finally, we define Gi+i such that Gi+i and Gi have the same 
footprint and Gi+i = Gi {G\{{Ei, {ti + t'i + 1,..., ti + t\ + 1 + L”})}). 

Gi+i is a COT ring (since it is indistinguishable from G after t, l + f( + 1 + ti"). Note that Gi 
and Gi+i are indistinguishable for robots until time ti + t[. This implies that, at time ti + t[, r\ 
and r 2 are on the same node in e* and in Ei+i. By construction of f(, either r\ or r 2 or both of the 
two robots move at time ti + t\ in £j+i- Moreover, even if one or both of the robots move during 
the Move phase of time ti +1[, at time ti +1[ + 1 the robots are still on nodes among {u, w, x}, by 
assumption on Gi and construction of Gi+i, since from time t t to time ti + t'i the edges permitting 
a robot to go on a node other than the nodes among {u, w , x} are missing. 

Let L-|_i = ti + t'i + 1 and ti" = , 1 . Then we can construct recursively each dynamic 

ring of (Gm)meN by applying the argues above on all the possible configurations reached by the 
movements of the robots at time t, l+ \ + t' i+l + 1 in Gi+i- 

Note that the recurrence can be initiated, since Go exists, is a COT ring and from time to = 0 
to time to + t ' 0 + 1 only nodes among {u, w , ,x} have been visited. In other words, (I? m )meN is 
well-defined. 

We can then define the evolving graph Gu such that Gu and Go have the same footprint and 
for all i G N, Gui shares a common prefix with Gi until time ti + t'i. As the sequence (t m + t( n ) m eN 
is increasing by construction, this implies that the sequence (Gm)m£N converges to Gui- 

Note that Guj is a COT ring. Indeed, among the cases presented, only the dynamic graph 
Gi+i built in case 3 possesses two simultaneous missing edges between time ti + \ and ti + \ + tE ,. 
However, even if at some point such a dynamic ring is used to construct (G m )m£N, note that since 
at least one of the two robots moves at time L_|_i +t' i+l then Gi+ 2 cannot be built thanks to case 3. 
Therefore, there is only one missing edge in Gi+ 2 between time L + 2 and f j + 2 + t' i+ 2 . In conclusion, 
there is at most one eventual missing edge and Glo is a COT ring. 

Applying the theorem of [34], we obtain that, until time L + t{, the execution of A in Goj is 
identical to the one in Gi- This implies that, executing A in Gui (whose footprint is a ring of size 4 
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or more), r\ and ?’2 only visit the nodes among {u, w, x}. This is contradictory with the fact that 
A satisfies the perpetual exploration specification in COT rings of size 4 or more using 2 robots 
possessing distinct identifiers. □ 

10.2.2 Highly Dynamic Rings of Size 3 or More 

In the previous chapter, we prove (in Theorem 10.2) that a single anonymous and synchronous 
robot cannot perpetually explore COT rings of size 3 or more in a fault-free setting. We can do 
two observations. First, any fault-free synchronous execution is possible in a self-stabilizing set¬ 
ting. Second, in the case of a single robot, the anonymous and the identified model are equivalent. 

These observations are sufficient to directly state the following result: 

Theorem 10.2. There exists no deterministic self-stabilizing algorithm satisfying the perpetual 
exploration problem under M. self-stabilizing exploration T COT rings of size 3 or more using one 
robot. 

10.3 Sufficiency of Three Robots for n > 4 

In this section, we present our self-stabilizing deterministic algorithm for the perpetual explo¬ 
ration of any COT ring of size greater than four with three robots. In this context, the difficulty 
to complete the exploration is twofold. First, in COT graphs, robots must deal with the possible 
existence of some eventual missing edge (without the guarantee that such edge always exists). 
Note that, in the case of a ring, there is at most one eventual missing edge in any execution (oth¬ 
erwise, we have a contradiction with the connected-over-time property). Second, robots have to 
handle the arbitrary initialization of the system (corruption of variables and arbitrary position of 
robots). 

10.3.1 Presentation of the algorithm 

Principle of the algorithm. The main idea behind our algorithm is that a robot does not 
change its direction (arbitrarily initialized) while it is isolated. This allows robots to perpetually 
explore COT rings with no eventual missing edge regardless of the initial direction of the robots. 

Obviously, this idea is no longer sufficient when there exists an eventual missing edge since, 
in this case, at least two robots will eventually be stuck (i.e., they point to an eventual missing 
edge that they are never able to cross) forever at one end of the eventual missing edge. Indeed, 
there are three robots in the system, hence at least two of them consider initially the same global 
direction, and hence will be stuck on the same extremity of the eventual missing edge. When 
two (or more) robots are located at the same node, we say that they form a tower. In this case, 
our algorithm ensures that at least one robot leaves the tower in a finite time using its identifier 
(see below). In this way, we obtain that, in a finite time, a robot is stuck at each end of the 
eventual missing edge. These two robots located at two ends of the eventual missing edge play 
the role of “sentinels” while the third one (we call it a “visitor”) visits other nodes of the ring in the 
following way. The “visitor” keeps its direction until it meets one of these “sentinels,” they then 
switch their roles: After the meeting, the “visitor” still maintains the same direction (becoming 
thus a “sentinel”) while the “sentinel” robot changes its direction (becoming thus a “visitor” until 
reaching the other “sentinel”). 

In fact, robots are never aware if they are actually stuck at an eventual missing edge or are 
just temporarily stuck on an edge that will reappear in a finite time. Hence, robots are never 
aware of their status (sentinel or visitor). That is why it is important that the robots keep their 
directions and try to move forward while there is no meeting in order to track a possible eventual 
missing edge. Our algorithm only guarantees convergence in a finite time towards a configuration 
where a robot plays the role of “sentinel” at each end of the eventual missing edge if such an edge 
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exists. Note that, in the case where there is no eventual missing edge, this mechanism does not 
prevent the correct exploration of the ring since it is impossible for a robot to be stuck forever. 

Our algorithm easily deals with the initial corruption of its variables. Indeed, all variables of a 
robot (with the exception of a counter and the variable dir whose initial respective values have no 
particular impact) store information about the environment of this robot in the previous round 
it was edge-activated (i.e., in the previous round where it was on a node that possesses a present 
adjacent edge, refer to Section 3.2). These variables are updated each time a robot is edge- 
activated. Since we consider COT rings, there can only exist one eventual missing edge, therefore 
all robots are infinitely often edge-activated. The initial values of these variables are hence reset 
in a finite time. The main difficulty to achieve self-stabilization is to deal with the arbitrary 
initial position of robots. In particular, the robots may initially form towers. In the worst case, 
all robots of a tower may be stuck at an eventual missing edge and be in the same state. They 
are then unable to start the “sentinels”/“visitor” scheme explained above. Our algorithm needs 
to “break” such a tower in a finite time (i.e., one robot must leave the node where the tower is 
located). In other words, we tackle a classical problem of symmetry breaking. We achieve this 
by providing each robot with a function that returns, in a finite number of invocations, different 
global directions to two robots of the tower based on the private identifier of the robot and without 
any communication among the robots. More precisely, this is done thanks to a transformation of 
the robot identifier: each bit of the binary representation of the identifier is duplicated and we 
add the bits “010” at the end of the sequence of these duplicated bits. Then, at each invocation 
of the function, a robot reads the next bit of this transformed identifier. If the robot reads zero, 
it tries to move to its left. Otherwise, it tries to move to its right. Doing so, in a finite number 
of invocation of this function, at least one robot leaves the tower due to the construction of the 
transformed identifiers that roughly guarantees some non-periodicity properties. If necessary, we 
repeat this “tower breaking” scheme until we are able to start the “sentinels”/“visitor” scheme. 

The main difficulty in designing this algorithm is to ensure that these two mechanisms (“sen- 
tinels”/“visitor” and “tower breaking”) do not interfere with each other and prevent the correct 
exploration. We solve this problem by adding some waiting “at good time,” especially before 
starting the procedure of tower breaking by identifier to ensure that robots do not prematurely 
turn back and “forget” to explore some parts of the ring. 


Formal presentation of the algorithm. Before presenting our algorithm formally, we need 
to introduce the set of constants (i.e., variables assumed not to be corruptible) and the set of 
variables of each robot. We also introduce three auxiliary functions. 

As stated in the model, each robot r has a unique identifier. We denote it by id r and represent 
it in binary as 6162 •• • ^>\id r \- We define, for the purpose of the “breaking tower” scheme, the con¬ 
stant Transformedldentifier by its binary representation 61 & 1 & 2&2 • • • b^d r \b^d r \0W (each bit of 
id r is duplicated and we add the three bits 010 at the end). We store the length of the bi¬ 
nary representation of Trans f or medldentifier in the constant t and we denote its i th bit by 
Trans for medl denti f ier[i\ for any 1 < i < £. 

In addition to the variable dir defined in the model, each robot has the following three vari¬ 
ables: (i) the variable i £ N corresponds to an index to store the position of the last bit read from 
Trans for medldentifier; (ii) the variable N umber Robots Previous Edge Activation € N stores 
the number of robots that were present at the node of the robot during the Look phase of the 
last round where it was edge-activated; and (Hi) the variable H asM ovedPrevious Edge Activa¬ 
tion £ {true, false} indicates if the robot has crossed an edge during its last edge-activation. 

Our algorithm makes use of a function UpdateQ that updates the values of the two last 
variables according to the current environment of the robot each time it is edge-activated. We 
provide the pseudo-code of this function in Algorithm 10.1. Note that this function also allows us 
to deal with the initial corruption of the two last variables since it resets them in the first round 
where the robot is edge-activated. 
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We already stated that, whenever robots are stuck forming a tower, they make use of a func¬ 
tion to “break” the tower in a finite time. The pseudo-code of this function GiveDirectionQ 
appears in Algorithm 10.2. It assigns the value left or right to the variable dir of the robot 
depending on the i th bit of the value of Trans formedldentifier. The variable i is incremented 
modulo f (that implicitly resets this variable when it is corrupted) to ensure that successive calls 
to GiveDirectionQ will consider each bit of Trans formedldentifier in a round-robin way. 
As shown in the next section, this function guarantees that, if two robots are stuck together in 
a tower and invoke repeatedly their own function GiveDirectionQ, then two distinct global 
directions are given in finite time to the two robots regardless of their chirality. This property 
allows the algorithm to “break” the tower since at least one robot is then able to leave the node 
where the tower is located. 


Algorithm 10.1 Function UpdateQ 

1: function Update() 

2: if Exists Adjacent Edge () then 

3: NumberRobotsPreviousEdgeActivation := NumberOf RobotsOnNode() 

4: HasMovedPreviousEdgeActivation := ExistsEdge(dir, current) 

5: end if 

6: end function 


Finally, we define the function OppositeDirectionQ that simply affects the value left 
(resp. right ) to the variable dir when dir = right (resp. dir = left). 

There are two types of configurations in which the robots may change the direction they 
consider. So, our algorithm needs to identify them. We do so by defining a predicate that 
characterizes each of these configurations. 

The first one, called WeAreStuckInTheSameDirection {), is dedicated to the detection of 
configurations in which the robot must invoke the “tower breaking” mechanism. Namely, the 
robot is stuck since at least one edge-activation with at least another robot and the edge in the 
direction opposite to the one considered by the robot is present. More formally, this predicate is 
defined as follows: 

WeAreStucklnTheSameDirectionf) = 

(NumberOf RobotsOnNode{) > 1) 

A [N umberO f RobotsOnNode() = Number RobotsPreviousEdgeActivation) 

A -■ ExistsEdgeidir , current) 

A ExistsEdgeidir , current) 

A -i HasMovedPreviousEdgeActivation 

The second predicate, called IWasStuckOnMyNodeAndNowWeAreMoreRobots(), is de¬ 
signed to detect configurations in which the robot must transition from the “sentinel” to the “vis¬ 
itor” role in the “sentinel”/“visitor” scheme. More precisely, such configuration is characterized by 
the fact that the robot is edge-activated, stuck during its previous edge-activation, and there are 
strictly more robots located at its node than at its previous edge-activation. More formally, this 
predicate is defined as follows: 

IWasStuckOnMyNodeAndNowWeAreMoreRobots {) = 

[NumberO f RobotsOnN ode{) > Number RobotsPreviousEdgeActivation) 

A -i HasMovedPreviousEdgeActivation 
A ExistsAdjacentEdge {) 

Now, we are ready to present the pseudo-code of the core of our algorithm (called §§_PEF_3, 
see Algorithm 10.3). The basic idea of the algorithm is the following. The function GiveDirec¬ 
tionQ is invoked when WeAreStucklnTlieSameDirectionf) is true (to try to “break” the tower 
after the appropriate waiting), while the function OppositeDirectionQ is called when IWas- 
StuckOnMyNodeAndNowWeAreMoreRobotsi) is true (to implement the “sentinel”/“visitor” 
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Algorithm 10.2 Function GiveDirectionQ 

1: function GiveDirection() 

2: i := i+ 1 (mod t) + 1 

3: if Trans for medldentifier[i] = 0 then 

4: dir := left 

5: else 

6: dir := right 

7: end if 

8: end function 


scheme). Afterwards, the function UpdateQ is called (to update the state of the robot according 
to its environment). 


Algorithm 10.3 §§_PEF_3 

1: StuckTogether :: WeAreStucklnTheSameDirectionQ 
2: —> GiveDirectionQ ; UpdateQ 

3: StuckAndJoined :: IWasStuckOnMyNodeAndNowWeAreAIoreRobotsQ 
4: —> OppositeDirectionQ ; UpdateQ 

5: Update :: true — » UpdateQ 


10.3.2 Preliminaries to the Correctness Proof 

First, we introduce some preliminary results that are used in the proof. All along the proof 
of correctness, we extensively use the notions of short-lived tower (robots located on a same node 
that disagree on their global direction the first time there exists an adjacent edge to their current 
location) and long-lived tower (robots located on a same node that agree on their global direction 
at each instant time (before the tower breaks) there exists an adjacent edge to their current 
location and that do not form a short-lived tower) that we defined in Section 3.2.4. 

As there are only three robots in our system, and that in each round each of them considers a 
global direction, we can make the following observation. 

Observation 10.1. There are at least two robots having the same global direction at each instant 
time. 

In the remainder of this section, we consider an execution £ of §S_PEF_3 executed by three 
robots ri, ?’ 2 , and r% in a COT ring Q of size n E N, with n > 4, starting from an arbitrary 
configuration. 

We say that a robot r has a coherent state at time t, if the value of its variable Number Robot s- 
PreviousEdgeActivation r g (i.e., value of the variable Number Robots Previous Edge Activation 
of the robot r after the Look phase of round t, refer to Section 3.2.1 for the introduction of this 
notation) corresponds to the value of its predicate NumberOf RobotsOnNode() at its previous 
edge-activation and the value of its variable HasMovedPreviousEdgeActivation r g corresponds 
to the value of its predicate ExistsEdge(dir , current ) at its previous edge-activation. The fol¬ 
lowing lemma states that, for each robot, there exists a suffix of the execution in which the state 
of the robot is coherent. 

Lemma 10.2. For any robot, there exists a time from which its state is always coherent. 

Proof. Consider a robot r performing §§_PEF_3. 

Q is a COT ring, hence at least one adjacent edge to each node of Q is infinitely often present. 
This implies that r is infinitely often edge-activated, whatever its location is. Let t be the first 
time at which r is edge-activated. 

Variables can be updated only during Compute phases of rounds. When executing §8_PEF_3, 
the variables Number Robots Previous Edge Activation and HasMovedPreviousEdge Activation 


146 







10.3. Sufficiency of Three Robots for n > 4 

of r are updated with the current values of its predicates N umber O f Robot sOnNodei) and 
ExistsEdge(dir, current ) only when it is edge-activated. 

Therefore from time t + 1, r is in a coherent state. □ 

Let t \, t 2 , and £3 be respectively the time at which the robots ri, ?’ 2 , and r 3 , respectively are 
in a coherent state. Let t m ax = max{t±, £ 2 , £ 3 }- From Lemma 10.2, the three robots are in a 
coherent state from t max ■ In the remainder of the proof, we focus on the suffix of the execution 
after tmax • 

The two following lemmas (in combination with Lemma 4.5 and Corollary 4.1) aim at showing 
that, regardless of the chirality of the robots and the initial values of their variables i, a finite 
number of synchronous invocations of the function GiveDirectionQ by two robots of a long- 
lived tower returns them a distinct global direction. This property is shown by looking closely to 
the structure of the binary representation of the transformed identifiers of the robots. 

Indeed, the round-robin reading of its transformed identifier by a robot r can be seen as 
an infinite binary word U(r) (the infinite concatenation of this transformed identifier). When 
robots of a long-lived tower are stuck on a node, we want them to break the tower by considering 
simultaneously two opposite global directions in finite time. The robots of a long-lived tower that 
are stuck on a node have their predicate WeAreStuckInTheSameDirection () true and hence 
use the function GiveDirectionQ. Two robots that possess the same chirality and that call 
the function GiveDirectionQ must consider two distinct bits at the same time to consider two 
opposite global directions at this time. Lemma 10.3 shows that any common factor of U(r\) and 
U(r 2 ) is finite for any pair of robots ri and r 2 , allowing us to later (see Corollary 10.1) state that, 
in finite time, if the predicate WeAreStuckInTheSameDirection() of the robots are infinitely 
often true then the long-lived tower they are involved in is broken. Lemma 10.4 shows a similar 
result when robots of the long-lived tower does not have the same chirality. 

To state formally these lemmas, we need to introduce some vocabulary and definitions from 
combinatorics on words. We consider words as (possibly infinite) sequence of letters from the 
alphabet A = {0,1}. Given a word u, we refer to its i th letter by u[i]. The length of a 
word u (denoted \u\) is its number of letters. Given two finite words u = u[l] ...u[k] and 
v = u[l] .. .v[l] (with k = |u| and i = |u|), the concatenation of u and v (denoted u.v) is the 
word u[l] ... u[fc]u[l] ... v[(\ (with \u.v\ = k + £). Given a finite word u, the word u 1 is u itself and 
the word u z (z > 1) is the word u.u z ~ l . Given a finite word u , the word u u is the infinite word 

u.u.u .A prefix u\ of a word u is a word such that there exists a word U 2 satisfying u = U 1 .U 2 . 

A suffix U 2 of a word u is a word such that there exists a word u\ satisfying u = U\.U 2 - A factor U 2 
of a word u is a word such that there exists a prefix u\ and a suffix U 3 of u satisfying u = U 1 .U 2 .U 3 . 
The factor of u starting from the i th bit of u and ending to the j th bit of u included is denoted 
u[i... j]. A circular permutation of a word u is a word of the form U 2 .U 1 where u = U\.U 2 - Let us 
introduce the notation w which given a word w is defined such that w = Tlis-jr H} M*] where if 
w[i\ = 1 then w[i\ = 0 , and if w[i] = 0 then w[i] = 1 . 

Lemma 10.3. Let u and v be two distinct transformed identifiers. If u u and v u share a common 
factor X, then X is finite. 

Proof. Consider two transformed identifiers u and v such that u v. 

By definition, the transformed identifier u is either equal to 00.010 or to 
11 .n^J (nf M) 00.LQ (u ’ d) 11) .010 (*) with a(u) a function giving the number of blocks 
(n^Mloo.rQ'^ll) contained in u, f3(u, d) a function giving the number of pairs of bits 00 con¬ 
tained in the d th block of u, and y(u, d) a function giving the number of pairs of bits 11 contained 
in the d th block of u. 

Similarly, by definition v is either equal to 00.010 or to ll.n^f^(nf^’^00.II^ 1 , ’^ll).010 (**). 

Let U = u u and V = v u . 

Assume by contradiction that U and V share a common factor X of infinite size. Hence 
U = x.X and V = y-X, with x (resp. y) the prefix of U (resp. of V). We have X = u u , where 
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u is a circular permutation of the word u , and X = v u , where v is a circular permutation of the 
word v. 

By definition of a common factor we have V/r £ N*, U[\x\ + h] = V[\y\ + h] (***). 

Let k £ N* such that U[\x\ + k] = 0, U[\x\ + k + 1] = 1 and U[\x\ + k + 2] = 0. By 
(*) and since U = x.X = x.vP, k exists. By (*) and by construction of U, we know that 
U[\x\ + k + 3 ... |x| + k + |u| + 2] is equal to u and U[\x\ + k + 3 ... |x| + k + |u| — 1] is either equal 

to oo or to li.n^i^nf M) oo.n^ (M) n). 

By (=t= * *), we have V[\y\ + k] =0, V[\y\ + k + 1] = 1 and V[\y\ + k + 2] =0. By (**) 
and by construction of V, we know that V[\y\ + k + 3... |y| + k + |u| + 2] is equal to v and 
V[\y\ + k + 3 ... |y| + k + |u| — 1] is either equal to 00 or to ll.n^f! ; 1 ' ) (nf^ , ’^00.n] ,< ' t ’’^ll). 

Case 1: |u| = |v|. 

If \u\ = |u|, then by (* * *) we have U[\x\ + k + 3 ... |x| + k + |u| + 2] = V[\y\ + fc + 3 ... |y| + 
k + |u| + 2], This implies that u = v, which leads to a contradiction with the fact that u 
and v are distinct. 

Case 2: |u| |v|. 

Without lost of generality assume that |u| < \v\. We have U[\x\ + k + |u|] = 0, U[\x\ + k + 
|u| + 1] = 1 and U[\x\ + k + |u| + 2] =0. Therefore by (* * *) we have V[\y\ + k + |it|] = 0, 
V[\y\ + k + |u| + 1] = 1 and V[\y\ + k + |u| + 2] = 0. 

Note that |u| = 2w + 3 with w £ N*. Similarly |u| = 2z + 3, with z £ N*, and z > w 
since |u| < |u|. Since V[\y\ + k + 3... \y\ + k + |u| + 2 ] is equal to v, this implies that 
V[\y\ + k + 3] = u[l], and V\\y\ + k + |u|] = V[\y\ + k + 2w + 3] = v[i\ where i is odd and 
such that 1 < i < 2z. Hence by (**), necessarily V[\y\ + k + 1^1] = V[\y\ + k + \u\ + 1], which 
leads to a contradiction with the fact that V[\y\ + k + |u|] = 0 and V[\y\ + k + \u\ + 1] = 1. 

□ 

Lemma 10.4. Let u and v be two distinct transformed identifiers. If (C and share a common 
factor X, then X is finite. 

Proof. Consider two transformed identifiers u and v such that u v. 

By definition, the transformed identifier u is either equal to 00.010 or to 
11 .n"^(nf 00 .n/ (M) 11),010 (*) with a{u) a function giving the number of blocks 
( n £(M)oo.n 7 (M) ll) contained in u , fi{u,d) a function giving the number of pairs of bits 00 con¬ 
tained in the d th block of u, and 7 (u, d) a function giving the number of pairs of bits 11 contained 
in the d th block of u. 

Similarly, by definition v is either equal to 00.010 or to 
ll.n^i^nf' ' J, 00.n] (t, ’ d) ll).010. Call w = v. This implies that |u;| = |u| and w is either equal 
to 11.101 or to OO.n^(nf11 00).101 (**). Note that u and w are distinct. Indeed, if 

|u| |u| then, w and u are distinct since \w\ = |u|. If |u| = |u| then, since the suffix of size 3 of u 

is the word 010, and the suffix of size 3 of w is the word 101, then u and w are distinct. 

Let U = vP and W = w u . 

Assume by contradiction that U and W share a common factor X of infinite size. Hence 
U = x.X and W = y.X, with x (resp. y) the prefix of U (resp. of W). We have X = u u , where 
u is a circular permutation of the word u , and X = w u , where w is a circular permutation of the 
word w. 

By definition of a common factor we have V/r £ N*, U[\x\ + /;,] = IT[|y| + h] (* * *). 

Let k £ N* such that U[\x\ + k] = 0, U[\x\ + k + 1] = 1 and U[\x\ + k + 2] = 0. By 
(*) and since U = x.X = x.vP, k exists. By (*) and by construction of U, we know that 
U[\x\ + k + 3 ... |x| + k + 1^1 + 2 ] is equal to u. 
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By (***), we have W[\y\ + k] = 0, W[\y\ + k + 1] = 1 and W[\y\ + k + 2] =0. By (**) and 
by construction of W, we know that either W[\y\ + k + 4 ... \y\ + k + \w\ + 3] = w (in the case 
where W[\y\ + k + 1] = ie[|u;| — 2]) or W[\y\ + k + 2 ... |y| + k + |tc| + 1] = w (in the case where 
W[\y\ + k + 1] = mw|]). 

Case 1: W[|y| + k + 4 ... |y| + k + |w| + 3] = w. 

In this case W[\y\ + k + 3] = 1, then necessarily by (* * *) U[\x\ + k + 3] = 1. By (*), and 
since U[\x\ + k + 3 ... \x\ + k + |u| + 2] = u, this implies that U[\x\ + k + 4] = 1. Therefore 
by (***), necessarily W[\y\ + k + 4] = 1. Since W[\y\ + k + 4... \y\ + k + |u;| + 3] = w, 
and by (**), this implies that vj = 11.101, otherwise W[|y| + k + 4] =0, which leads to a 
contradiction with the fact that l/[|a:| + /c + 4] = 1. 

This implies by (***), that U[\x\+k+3 ... |a:|+fc+8] = 111101. Therefore by (*), necessarily 
U[\x\ +k + 9] =0. However by construction of W, since W[\y \ + k+4.. .\y\f-k + \w\+3] = 
w, and since |ic| = 5, we have W[\y\ + k + 9... \y\ + k + 13] = w. This implies that 
W[|y| + k + 9] = 1 since w = 11.101, which leads to a contradiction with (* * *) since 
C/[|a:| + k + 9] = 0. 

Case 2: W[|y| + k + 2 ... |y| + k + |wj + 1] = w. 

In this case, since W[\y\ +k + 2] = 0, this implies by (**) that W[\y\ + k + 3] =0. Therefore 
by (* * *) we have U[\x\ + k + 3] = 0. Hence, since U[\x\ + k + 3 ... \x\ + k + |u| + 2] = u, 
then by (=t=), we have u = 00.010, otherwise U[\x\ + k + 3] = 1 which leads to a contradiction 
with the fact that W[\y\ + k + 3] =0. 

This implies by (***), that W[\y\ + k + 2 ... |y| + k + 7] = 000010. Therefore by (**), 
necessarily W[\y\ + k + 8] = 1. However by construction of [7, since U[\x\ + k + 3 ... |x| + 
k+ \u\ +2] = u, and since |u| = 5, we have U[\x\ + k + 8 ... |a;| + k + 12] = u which implies 
that U[\x\ + k + 8] = 0 since u = 00.010, which leads to a contradiction with (* * *) since 
W[\y\ + k + 8] = 1. 


□ 


10.3.3 Tower Properties 

We are now able to state a set of lemmas that show some interesting technical properties of 
towers under specific assumptions during the execution of our algorithm. These properties are 
extensively used in the main proof of our algorithm. 

This first lemma is a preliminary result used only in the proof of the two following ones 
(Lemmas 10.6 and 10.7). 

Lemma 10.5. The robots of a long-lived tower T = ( S , [t s ,t e ]) consider the same global direction 
at each time between the Look phase of round t s and the Look phase of round t e included. 

Proof. Consider a long-lived tower T = (5, [t s ,t e ]). 

Call tact the first time in [t s ,t e [ at which the robots of S are edge-activated. Since T is a 
long-lived tower, t ac t. exists. 

When executing §§_PEF_3, a robot can change the global direction it considers only when 
it is edge-activated. Moreover a robot does not change the global direction it considers if it has 
moved during its previous edge-activation. Besides, during the Look phase of a time t a robot 
considers the same global direction as the one it considers during the Move phase of time t — 1. 

Therefore, during the Look phase of time t s the robots of S consider the same global direction. 
Indeed, if this was not the case; i.e., if the robots of S consider different global directions during 
the Move phase of time t s — 1; they necessarily move during the Move phase of time t s — 1 
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(otherwise T is not formed at time t s ), therefore they separate during the Move phase of time 
tact■ This leads to a contradiction with the fact that T is a long-lived tower. 

Consider a time t t e [. If at time t the robots of S are not edge-activated, then during the 
Move phase of time t the robots of S do not change the global direction they consider. 

T is a long-lived tower from time t s to time t e included. Therefore if at time t &]t s ,t e [ the 
robots of S are edge-activated, then, by definition of a long-lived tower, during the Move phase 
of time t, the robots of S consider the same global direction. 

Since at time t s the robots of S consider the same global direction, using the two previous 
arguments by recurrence on each time t €]t s ,t e [ and the fact that robots change the global direc¬ 
tions they consider only during Compute phases, we can conclude that the robots of S consider 
the same global direction from the Look phase of time t s to the Look phase of time t e . □ 

The following lemma is used to prove, in combination with Lemmas 10.3 and 10.4, the “tower 
breaking” mechanism since it proves that robots of a long-lived tower synchronously invoke their 
GiveDirectionQ function after their first edge-activation. 

Lemma 10.6. For any long-lived tower T = ( S , [t s ,t e \), any ( rt,rj ) in S 2 , and any t less or 
equal to t e , we have WeAreStuckInTheSameDirection() rit t = WeAreStucklnTheSameDire- 
ction() rj} t and IWasStuckOnMyNodeAndNowWeAreMoreRobots() ru t = IWasStuckOnMy- 
NodeAndNowWeAreMoreRobots() rjt t if all robots of S have been edge-activated between t s 
(included) and t (not included). 

Proof. Consider a long-lived tower T = (S, [t s , t e \). Let t ac t be the first time in [t s ,t e [ where the 
robots of S are edge-activated. By definition of a long-lived tower, this time exists. 

By definition of a long-lived tower and by lemma 10.5, from the Look phase of time t s to the 
Look phase of time t e included, all the robots of S are on the same node and consider the same 
global direction. Therefore the values of their respective predicates NumberO f RobotsOnNodeQ , 
ExistsEdge(dir, current), ExistsEdge(dir, current), and ExistsAdjacentEdgeQ are identical 
from the Look phase of time t s to the Look phase of time t e included. 

When executing 8§_PEF_3, a robot updates its variables NumberRobotsPreviousEdge- 
Activation and HasM ovedPreviousEdgeActivation respectively with the values of its predi¬ 
cates NumberO f RobotsOnNodeQ and ExistsEdge(dir, current) , only during Compute phases 
of times where it is edge-activated. By the observation made at the previous paragraph, this 
implies that from the Compute phase of time t ac t to the Look phase of time t e included, the 
robots of S have the same values for their variables NumberRobotsPreviou-sEdgeActivation 
and HasMovedPreviousEdgeActivation. 

Then, by construction of the predicates WeAreStucklnTheSameDirectionQ and IWas- 
StuckOnMyNodeAndNowWeAreMoreRobotsQ, the lemma is proved. 

□ 

From Lemmas 10.6, 10.3, and 10.4, we can deduce the following corollary stating that there 
exists a time from which the predicate WeAreStucklnTheSameDirectionQ of the robots of any 
infinite long-lived tower is always false. This corollary is useful to prove that our algorithm solves 
the perpetual exploration problem in the particular case of the presence of an infinite long-lived 
tower. Indeed, it implies that, if there is an infinite long-lived tower, then it exists a time from 
which its robots are never stuck forever. Note that, in the particular case where the long-lived 
tower is composed of the three robots of the system, this implies that the 3 robots never change 
the direction they consider (since these robots cannot have their predicate IWasStuckOnMy- 
NodeAndNowWeAreMoreRobotsQ true) making them able to perpetually explore the highly 
dynamic ring. 

Corollary 10.1. For any long-lived tower T = (S, [f s , t e \), if t e = +oo then the predicates 
WeAreStucklnTheSameDirectionQ of the robots of S cannot be infinitely often true. 
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Proof. First, note that if two robots possess two distinct identifiers, then their transformed iden¬ 
tifiers are also distinct. 

Consider a long-lived tower T = (S, 0) with 0 = [f s , +oo[. 

Call t ac t > t.s the first time after t s where the robots of S are edge-activated. By definition 
of a long-lived tower, t ac t exists. By Lemma 10.6, after time t ac t, the robots of S consider the 
same values of predicates WeAreStucklnTheSameDirectionQ and IWasStuckOnMyNode- 
AndN owW eAreM oreRohotsf). 

Assume by contradiction that after t ac t the predicates WeAreStuckInTheSameDirection() 
of the robots of S are infinitely often true. Then by construction of §§_PEF_3, after time t ac t, 
all the robots of S call the function GiveDirectionQ infinitely often and at the same instants 
of times. 

If among the robots of S two have the same chirality, to keep forming T they need to consider 
the same values of bits each time the function GiveDirectionQ is called. Here the robots 
have to consider the same values of bits infinitely often (since the two robots call the function 
GiveDirectionQ infinitely often). Each time a robot executes the function GiveDirection() 
it reads the bit next (in a round robin way) to the bit read during its previous call to the function 
GiveDirectionQ. Call i\ and 12 the two respective transformed identifiers of two robots forming 
T such that these two robots possess the same chirality. By the previous observations, to keep 
forming T, if and if must share an infinite common factor. However according to Lemma 10.3 
this is not possible. Therefore there exists a time t en d at which these two robots consider two 
different bits. When the robots call the function GiveDirectionQ, they are edge-activated (by 
definition of the predicate WeAreStuckInTheSameDirection ()), therefore at time t en d, T is 
broken. 

Similarly, if among the robots of S two have not the same chirality, to keep forming T they 
need to consider different values of bits each time the function GiveDirectionQ is called. Here 
the robots have to consider different values of bits infinitely often (since the two robots call the 
function GiveDirectionQ infinitely often). Each time a robot executes the function GiveDi¬ 
rectionQ it reads the next bit (in a round robin way) of the bit read during its previous call 
to the function GiveDirectionQ. Call j\ and j 2 the two respective transformed identifiers of 
two robots forming T such that these two robots possess a different chirality. By the previous 
observations, to keep forming T, jf must possess an infinite suffix S such that an infinite suffix 
of jf is equal to S. This is equivalent to say that jf and jf must possess an infinite common 
factor. However according to Lemma 10.4 this is not possible. Therefore there exists a time 
t en d at which these two robots consider two identical bits. When the robots call the function 
GiveDirectionQ, they are edge-activated, therefore at time t en d , T is broken. 

Hence in both cases the long-lived tower T is broken, which leads to a contradiction with the 
fact that 6 = [t s , +oo[. □ 

The next lemma states one of the more fundamental properties of our algorithm: If there 
exists an eventual missing edge, then it is not possible for all the robots to be stuck forever on 
one or both of the extremities of this edge. 

Lemma 10.7. If there exists an eventual missing edge, then all long-lived towers have a finite 
duration. 

Proof. Consider that there exists an edge e of Q which is missing forever from time t m i ss i ng . 
Consider the execution from time t mlsslng . 

Call u and v the two adjacent nodes of e, such that v is the adjacent node of u in the clockwise 
direction. 

By contradiction assume that there exists a long-lived tower T = (S, 0) such that 6 = 
[t. 5 , Too[. Exactly 3 robots are executing §S_PEF_3, so (S'! is either equal to 2 or 3. We want 
to prove that all the robots of T have their predicates WeAreStuckInTheSameDirection () in¬ 
finitely often true. By contradiction, assume that there exists a robot r* of S, such that it exists a 


151 



Part III, Chapter 10 - Perpetual Exploration With Transient Faults 


time ti in 9 such that for all time t greater or equal to t t its predicate WeAreStucklnTheSame¬ 
DirectionQ is false. 

Call t ac t > t s , the first time after time t s where the robots are edge-activated. Since T is a 
long-lived tower, t ac t exists. By Lemma 10.6, from time t ac t + 1 the robots of S possess the same 
values of predicates WeAreStucklnTheSameDirectionQ . By assumption of contradiction, from 
time tf a i se = max{t ac t + 1 ,ti} the predicates WeAreStucklnTheSameDirectionQ of all the 
robots of S are false. 

We recall that by definition of a long-lived tower and by Lemma 10.5 all the robots of S are 
on the same node and consider the same global direction from the Look phase of time t s to the 
Look phase of time t e included. 

Case 1 : |S| = 3. From time t s the predicates NumberOf RobotsOnNodeQ of the robots of S 
are equal to 3. When executing §§_PEF_3, a robot updates its variables NumberRo- 
botsPreviousEdgeActivation with the value of its predicate NumberO f RobotsOnNodeQ , 
only during Compute phases of times where it is edge-activated. Therefore, from time 
t false, the robots of S have their variables N umber Robots Previous Edge Activation equal 
to 3. Hence, from time tf a i S e their predicates IWasStuckOnMyNodeAndNowWeAre- 
MoreRobotsQ are false, since the condition NumberOf RobotsOnNodeQ > NumberRo- 
botsPreviousEdgeActivation is false. 

Since from time tf a i se , the predicates WeAreStucklnTheSameDirectionQ of the robots 
of S are also false, then from time tf a i se the robots of S always consider the same global 
direction. 

Without lost of generality, assume that, from time tf a i se , the robots of S consider the 
clockwise direction. All the edges of Q except e are infinitely often present, therefore the 
robots of S reach node u in finite time. However e is missing forever, hence in finite time, 
the predicates WeAreStucklnTheSameDirectionQ of all the robots are true. This leads 
to a contradiction. 

Case 2: |S| = 2 . Assume, without lost of generality, that T is formed of rq and rq. 

If, after tf a i se , the 2-long-lived tower does not meet r 3 , then by similar arguments as the 
one used for the case 1 we prove that there is a contradiction. 

Now consider the case where the 2-long-lived tower meets r 3 . If at a time t! > tf a i se , the 
robots of S meet rq it is either because the two entities (the tower and 7 * 3 ) move during the 
Move phase of time t' — l while considering two opposed global directions or because the two 
entities consider the same global direction but one of the entities cannot move (an edge is 
missing in its direction) during the Move phase of round t' — l. Let t' act > t! be the first time 
after time t! included where the three robots are edge-activated. All the edges of Q except 
e are infinitely often present therefore t! ac ± exists. In both cases, thanks to the update at 
time t' — 1 of the variables HasMovedPreviousEdgeActivation and Number Robot sPre- 
vious Edge Activation of the robots, during the Move phase of time t' acf the robots of the 
two entities consider opposed global directions. The two entities separate them during the 
Move phase of this time. Moreover, from this separation, as long as r 3 is alone on its node it 
does not change the global direction it considers. Similarly, from this separation, as long as 
the robots of S do not meet ry, their predicates IW asStuckOnMyN odeAndN owW eAre- 
MoreRobotsQ are false, and since from time tf a i se their predicates WeAreStucklnThe¬ 
SameDirectionQ are false, they do not change the global direction they consider. 

Hence, in finite time after time t' act the two entities are located respectively on the two 
extremities of e. However e is missing forever, therefore in finite time, the predicates We¬ 
AreStucklnTheSameDirectionQ of the robots of T are true. This leads to a contradiction. 

In both cases a contradiction is highlighted. Therefore, after tf a i se all the robots of S have 
their predicates WeAreStucklnTheSameDirectionQ infinitely often true. Then we can use the 
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contrapositive of Corollary 10.1 to prove that T is broken, which leads to a contradiction with 
the fact that 6 = [i s , +oo[. □ 

While proving the correctness of §§_PEF_3, we decompose the proof in multiple cases de¬ 
pending on the presence/absence of fc-long-lived tower in the execution. The following lemma 
states that, in the case where there is no long-lived tower in the execution, then the execution 
contains only configurations with either three isolated robots or one 2-short-lived tower and one 
isolated robot. 

Lemma 10.8. No execution containing only configurations without a long-lived tower reaches a 
configuration where three robots form a tower. 

Proof. Assume that there is no long-lived tower in the execution. The robots can cross at most 
one edge at each round. Each node has at most 2 adjacent edges in Q. Moreover each robot 
considers at each instant time a direction. Assume, by contradiction that 3 robots form a tower T 
at a time t. Let t! >t be the first time after time t where the robots of T are edge-activated. There 
is no 3-long-lived tower in the execution, therefore during the Move phase of time t!, the robots 
of T consider two opposed global directions. However there are three robots, and two different 
global directions, hence, during the Move phase of time t', two robots of T consider the same 
global direction. Therefore there exists a 2-long-lived tower, which leads to a contradiction. □ 

The following lemma is a technical preliminary used in the proof of Lemmas 10.10 and 10.11. 

Lemma 10.9. In every execution, if a tower involving 3 robots is formed at time t, then at time 
t — 1 a 2-long-lived tower is present in e. 

Proof. Assume that a tower T of 3 robots is formed at time t. 

First note that if there exists a 2-long-lived tower T' = ( S , [t s , t e ]) such that t — 1 G [t s , t e [, it 
is possible for T to be formed. 

Now we prove that if there is no 2-long-lived tower at time t — 1 then T cannot be formed 
at time t. Assume that at time t — 1 there is no 2-long-lived tower. Let us consider the three 
following cases. 

Case 1: There is a tower T 7 of 3 robots at time t — 1. The tower T' must break at time 
t — 1, otherwise there is a contradiction with the fact that T is formed at time t. Hence 
the robots of T' are edge-activated at time t — 1. While executing §§_PEF_3 the robots 
consider a direction at each round. There are only two possible directions. Therefore, for 
the tower T' to break at time t — 1, two robots of T' consider the same global direction, 
while the other robot of T' considers the opposite global direction. This implies that the 
three robots cannot be present on the same node at time t, since n > 4. 

Case 2: There is a 2-short-lived tower T' at time t — 1. For the three robots to form T at 
time t, they must be edge-activated at time t — 1. By definition of a 2-short-lived tower, 
the two robots of T' consider two opposed global directions during the Move phase of time 
t — 1. Since the robots can cross at most one edge at each round, it is not possible for the 
three robots to be on the same node at time t, which leads to a contradiction with the fact 
that T is formed at time t. 

Case 3: There are 3 isolated robots at time t — 1. For the three robots to form T at time 
t, they must be edge-activated at time t — 1. The robots can cross at most one edge at each 
round. Each node has at most 2 adjacent edges present in Q. Moreover each robot considers 
at each instant time a direction. Therefore it is not possible for the three robots to be on 
the same node at time t, which leads to a contradiction with the fact that T is formed at 
time t. 
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□ 

The following lemma shows that our algorithm ensures that the absence of 3-long-lived tower 
is a closed property. 

Lemma 10.10. Every execution starting from a configuration without a 3-long-lived tower cannot 
reach a configuration with a 3-long-lived tower. 

Proof. Assume that £ starts from a configuration which does not contain a 3-long-lived tower. By 
contradiction, let 7 be the first configuration of £ containing a 3-long-lived tower T = (S', [t s , t e ]). 

Let tact > t s be the first time after time t s where the 3 robots of T are edge-activated. By 
definition of a long-lived tower, t ac t exists. 

Lemma 10.9 implies that the configuration at time t s — 1 contains a 2-long-lived tower. Hence, 
since 7 contains the first 3-long-lived tower of £, at time t s a 2-long-lived tower and a robot meet 
to form T. The meeting between these two entities can happen either because both of them 
move in opposed global directions during the Move phase of time t s — 1, or because, during the 
Move phase of time t s — 1, the two entities consider the same global direction but one of the 
entities cannot move (an edge is missing in its direction). In both cases; thanks to the update 
of the variables HasMovedPreviousEdgeActivation and NumberRobot.sPreviousEdgeActiva¬ 
tion at time t s — 1; during the Move phase of time t ac t. the two entities consider opposed global 
directions. Hence, the two entities separate during the Move phase of time t ac t, therefore there is 
a contradiction with the fact that T is a 3-long-live tower. □ 

The following lemma is a technical lemma used commonly by Lemmas 10.12 and 10.13. 

Lemma 10.11. Consider an execution £ without any 3-long-lived tower. If a 2-long-lived tower 
T is formed at a time t s , then during the Look phase of time t s — 1, a tower T' of 2 robots involving 
only one robot of T is present. Moreover, during the Move phase of time t s — 1, the robot of T 
involved in T' does not move while the other robot ofT moves. 

Proof. Consider an execution £ without any 3-long-lived tower. Assume that at time t s a 2-long- 
lived tower T = ( S , [ t s , t e \ ) is formed. 

First note that if there exists a tower T' of 2 robots at time t s — 1, such that only one robot of 
T' is involved in T and such that this robot does not move during the Move phase of time t s — 1, 
then it is possible for T to be formed. Now we prove that T can be formed at time t s only in this 
situation. 

Assume, by contradiction, that there is no tower of 2 robots during the Look phase of time 
t s — 1. This implies that, at time t s — 1 either the three robots are involved in a 3-short-lived 
tower T 3 (case 1 ) or the three robots are isolated (case 2 ). 

Case 1: Call t, the time of the formation of T 3 . At time t s — 1 the robots of T 3 are edge-activated, 
otherwise T cannot be formed at time t s . By definition of a 3-short-lived tower, during the 
Move phase of time t s — 1 the robots of T 3 separate. While executing SS_PEF_3, each 
robot considers at each instant time a direction. Therefore, during the Move phase of time 
t s — 1 two robots of T 3 consider the same global direction. These two robots are still on 
the same node at time t s , hence only these two robots can be involved in T. However, since 
these two robots are on the same node at least from time t and consider the same global 
direction when they are edge-activated during the Move phase of time t s — 1, there is a 
contradiction with the fact that T is formed at time t s . 

Case 2: At time t s — 1 the robots of T must be edge-activated, otherwise there is a contradiction 
with the fact that T starts at time t s - 

Since there is no long-lived tower at time t s — 1 then by Lemma 10.9, at time t s it is not 
possible to have a tower of 3 robots. Then since at time t s , T is formed, it exists at time t s 
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a tower of 2 robots. For two robots to form a tower at time t s , during the Move phase of 
time t s — 1, they either both move while considering two opposed global directions or they 
consider the same global direction but one of the robots cannot move (an edge is missing 
in its direction). In both cases, thanks to the update of their variables NumberRobots- 
Previous Edge Activation and H as MovedPrevious Edge Activation during the Compute 
phase of time t s — 1, during the Move phase of the first time greater or equal to t s where 
these two robots are edge-activated, they consider opposed global directions and separate 
them. Therefore there is a contradiction with the fact that T is a 2-long-lived tower starting 
at time t s . 

Therefore there exists a tower of 2 robots T' during the Look phase of time t s — 1. Now assume, 
by contradiction that the two robots of T' are involved in T. If T' is a 2-long-lived tower then 
during the Move phase of time t s — 1 the two robots of T' are edge-activated and consider two 
opposed global directions, otherwise there is a contradiction with the fact that T starts at time 
t s . If T' is a 2-short-lived tower then during the Move phase of time t s — 1 the two robots of T' 
are edge-activated (otherwise T cannot be a 2-long-lived tower), and they consider two opposite 
global directions (by definition of a 2 -short-lived tower). 

A robot can cross only one edge at each instant time. Since n > 4 whatever the situation 
(only one of the robots of T moves or both of the robots of T move during the Move phase of time 
t s — 1) the two robots of T cannot be again on the same node at time t s . In conclusion, only one 
robot of T' is involved in T. 

Finally, assume by contradiction, that during the Move phase of time t s — 1, either both the 
robots of T move (in this case, during the Move phase of time t s — 1 the two robots consider two 
opposed global directions otherwise they cannot meet to form T) or only the robot of T involved 
in T' moves while the other robot of T does not move (in this case, during the Move phase of 
time t s — 1 the two robots consider the same global direction otherwise they cannot meet to form 
T ). In both cases, thanks to the update of the variables HasMovedPreviousEdgeActivation 
and Number Robots Previous Edge Activation during the Compute phase of time t s — 1, during 
the Move phase of the first time after time t s where the robots of T are edge-activated, they 
consider two opposed global directions. Therefore there is a contradiction with the fact that T is 
a 2 -long-lived tower starting at time t s ■ □ 

The next two lemmas show that the whole ring is visited between two consecutive formations 
of 2-long-lived towers if these two towers satisfy some properties. Intuitively, this fundamental 
property of our algorithm is mainly due to the fact that the robots of a long-lived tower, when 
they detect they are stuck, wait one edge-activation before trying to break this tower. 

Indeed, if this mechanism of “tower breaking” was not delayed from one edge-activation, then 
it is possible to not solve the perpetual exploration problem since a 2-long-lived tower T may 
then be formed just after another one T' is broken, without having the whole ring explored at 
least once by the robots. The formation of T is due to the meeting between a robot r executing 
the sentinel/visitor scheme and a robot that was involved in T'. As long as r is involved in T, it 
cannot visit anymore the nodes of the ring since it is involved in a 2 -long-lived tower, and since 
the robots of this tower may be stuck on their node and hence try to break it. While being broken, 
one of the robots of T can meet the robot not involved in it (and which is therefore executing the 
sentinel/visitor scheme), creating another 2-long-lived tower, etc. Therefore, without this delay, 
it is possible to prevent the robots to execute the sentinel/visitor scheme and hence to explore 
the ring. 

Lemma 10.12. Consider an execution £ without any 3-long-lived tower but containing a 2-long- 
lived tower T = (S', [t s , t e \). If there exists another 2-long-lived tower T' = (S', [t' s , t' e \), with 
t' s > t e + 1 and such that T' is the first 2-long-lived tower after T in £, then all the nodes of Q 
have been visited by at least one robot between time t. e and time t' s — 1. 
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Proof. Consider an execution £ without any 3-long-lived tower but containing a 2-long-lived 
tower T = ( S , [t s , t e \). Assume that there exists another 2-long-lived tower T' = (S' , [t ' s , t' e ] ), with 
t' s > t e + 1 and such that T' is the first 2-long-lived tower after T in £. 

Since by assumption there is no long-lived tower between the Look phase of time t e + 1 and 
the Look phase of time t' s — 1 included, then by Lemma 10.8, from the Look phase of time t e +1 to 
the Look phase of time t' s — 1 included, if some robots meet they only form 2-short-lived towers. 
Therefore, by Lemma 10 . 11 , at time t' s — 1 there exists a 2 -short-lived tower T s hort- 

To form T ', by Lemma 10.11, the configuration C reached is such that T s hort and the robot of 
T' not involved in Tshort are on two adjacent nodes, the adjacent edge to the location of Tshort in 
the global direction d is missing at time t' s — 1, and the two robots of T' are edge-activated and 
consider the global direction d during the Move phase of time t' s — 1. During the Move phase of 
time t e the configuration C' is such that the two robots of T are on the same node considering 
two opposed global directions. Moreover, from the Look phase of time t e + 1 to the Look phase 
of time t' s — 1 included, if two robots meet they separate once they are edge-activated considering 
two opposed global directions. Besides, while executing §S_PEF_3, a robot does not change the 
global direction it considers if it is isolated. All this implies that to reach C from C all the nodes 
of Q have been visited by at least one robot between time t e and time t' s — 1 . □ 

Lemma 10.13. Consider an execution £ without any 3-long-lived tower, and letT = (Si, [t s i,t e *]) 
be the i th 2-long-lived tower of £, with i > 2. IfT + i = (Si+ 1 , t e _i+i\) exists and satisfies 

t s i -|_i = t e i + 1, then all the nodes of Q have been visited by at least one robot between time 
t s i — 1 and time t s i +1 — 1 . 


Proof. Consider an execution £ without any 3-long-lived tower but containing a 2-long-lived 
tower Ti = (S'*, [t s i,t e j]), with i > 2 . Assume that there exists another 2-long-lived tower 
T i+ 1 = (S i+ 1 , [t s _i + i,t e _ i+ i]), with t s _ i+ 1 = t e _i + 1. By Lemma 10.11, to form T i+1 , a tower of 
2 robots involving only one robot of Ti+ 1 must be present at time t s i+ 1 — 1 . Moreover T is a 
tower of 2 robots which is present in Q from time t s i to time t s — 1. Therefore Si +1 7 ! S'*. 

To form Ti, by Lemma 10.11, the configuration C reached at time t s 7 — 1 is such that there 
is a tower T of 2 robots involving only one robot of T and the other robot of Ti which are on two 
adjacent nodes. 

Similarly, by Lemma 10.11, and since t s j+i = t e i + 1, to form T + \, the configuration C' 
reached at time t, s i + \ — 1 is such that Tj and the robot of T ,: + 1 not involved in T are on two 
adjacent nodes, the adjacent edge to the location of T in the global direction d is missing at 
time t s i+i — 1, and the two robots of T + 1 are edge-activated and consider the global direction 
d during the Move phase of time t s i+i — 1- Moreover, since there is no 3-long-lived tower in £, 
from the Look phase of time t s j to the Look phase of time t s i + 1 — 1 included, if Ti meets the 
other robot of the system, they form a 3-short-lived tower and hence they separate once they are 
edge-activated considering two opposed global directions. Besides, while executing §§_PEF_3, 
a robot does not change the global direction it considers if it is isolated. All this implies that to 
reach C from C all the nodes of Q have been visited by at least one robot between time t s j — 1 
and time t s j+i — 1 . □ 

10.3.4 Correctness Proof 

Upon establishing all the above properties of towers, we are now ready to state the main 
lemmas of our proof. Each of these three lemmas below shows that after time t max our algo¬ 
rithm performs the perpetual exploration in a self-stabilizing way for some specific subclasses of 
COT rings that form a partition of COT. 

Lemma 10.14. §S_PEF_3 satisfies the perpetual exploration problem in ST rings of arbitrary 
size under A '(self—stabilizing exploration using three robots. 
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Proof. Assume that Q is a ST ring. While executing §8_EEE_3, a robot considers a direction at 
each round. Moreover, a robot does not change the global direction it considers if its variable Has- 
MovedPreviousEdgeActivation is true. The variables of a robot are updated during Compute 
phases of times where it is edge-activated. Since Q is a ST ring, this implies that in each round 
all the robots are edge-activated and are able to move whatever the direction they consider. 
So, after t max their variables HasM ovedPreviousEdge Activation are always true. Hence, the 
robots never change their directions. 

As (i) the robots have a stable direction, (ii) they always consider respectively the same global 
direction, and (in) there always exists an adjacent edge to their current locations in the global 
direction they consider, the robots move infinitely often in the same global direction. Moreover, 
as Q has a finite size, this implies that all the robots visit infinitely often all the nodes of Q. □ 

Lemma 10.15. S8_PEF_3 satisfies the perpetual exploration problem in1ZS\ST rings of arbi¬ 
trary size under M self stabilizing exploration using three robots. 

Proof. Assume that Q is a 1Z£\ST ring. Let us study the following cases. 

Case 1: There exists at least one 3-long-lived tower in £. 

Case 1.1: One of the 3-long-lived towers of £ has an infinite duration. 

Denote by T = ( S , [t s , +oo[) the 3-long-lived tower of £ that has an infinite duration. 
Call tact > t s the first time after time t s where the robots of T are edge-activated. 
By definition of a long-lived tower, t ac t. exists. The variables of a robot are updated 
during Compute phases of times where it is edge-activated. Therefore, since there are 
three robots in the system, from time t ac t + 1, the condition “ NumberO f RobotsOn- 
Node() > NumberRobotsPreviousEdgeActivation” is false for the three robots of T. 
Therefore from time t ac t + 1 the predicate IWasStuckOnMyNodeAndNowWeAre- 
MoreRobotsf) of each robot of T is false. 

By Corollary 10.1, eventually, the predicates WeAreStucklnTheSameDirectionQ of 
the robots of T are always false, otherwise T is broken in finite time, which leads to a 
contradiction. 

Since eventually the predicates IWasStuckOnMyNodeAndNowWeAreMoreRobot.s() 
and WeAreStuckInTheSam.eDirection( ) of the robots of T are always false, then 
eventually they never change the global direction they consider. Q is a TZ£ ring, there¬ 
fore there exists infinitely often an adjacent edge to the location of T in the global 
direction considered by the robots of T, then the robots are able to move infinitely 
often in the same global direction. Moreover, as Q has a finite size, all the robots visit 
infinitely often all the nodes of Q. 

Case 1.2: Any 3-long-lived tower of £ has a finite duration. 

By Lemma 10.10, once a 3-long-lived tower is broken, it is impossible to have another 
3-long-lived tower in £. Then, £ admits an infinite suffix that matches either case 2 or 
3. 

Case 2: There exists at least one 2-long-lived tower in £. 

Case 2.1: There exists a finite number of 2-long-lived towers in £. 

Let T' = (S ', [t ' s , t'ffi) be the last 2-long-lived tower of £. 

There is no 3-long-lived tower in £ at time t' s (otherwise Case 1 is considered), hence by 
Lemma 10.10 there is no 3-long-lived tower in £. Moreover, if T' has a finite duration, 
then £ admits an infinite suffix with no long-lived tower, hence matching case 3. 
Otherwise, (i.e., T' has an infinite duration), as in Case 1.1, the robots of T' eventually 
have their predicates WeAreStuckInTheSameDirection() always false, otherwise, T' 
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is broken in finite time. Let tf a i se be the time from which the robots of T' have their 
predicates WeAreStuckInTheSameDirection() always false. After time tf a i S e , the 
only case when the robots of T' change the global direction they consider, is when 
they meet the third robot of the system. 

Case 2.1.1: The robots of T' meet the third robot finitely often. 

After the time when the last tower of 3 robots is broken, the robots of T' have their 
predicates IWasStuckOnMyNodeAndNowWeAreMoreRobots() always false. 
Let tfereafc be the time when the last tower of 3 robots is broken. From time 
t = mcix{tbreak,tfalse} + 1 the robots of T' have their predicates IWasStuck- 
OnMyNodeAndNowWeAreMoreRobotsQ and WeAreStucklnTheSameDire- 
ction( ) always false, therefore they never change the global direction they con¬ 
sider. Since Q is a 1Z£ ring, there is infinitely often an adjacent edge to the loca¬ 
tion of T' in the direction considered by the robots of T'. This implies that they 
are able to move infinitely often in the same global direction. Moreover, as Q has 
a finite size, this implies that all the nodes of Q are visited infinitely often. 

Case 2.1.2: The robots of T' meet the third robot infinitely often. 

Consider the execution after time tf a i se . The robot not involved in T' does not 
change its direction while it is isolated. Similarly, the robots of T' maintain their 
directions at least until they meet the third robot. Moreover, when the robots of 
T' meet the third robot of the system, they form a 3-short-lived tower. There¬ 
fore once they are edge-activated, they separate them considering opposed global 
directions. Then, we can deduce that all the nodes of Q are visited between two 
consecutive meetings of T' and the third robot. As T' and the third robot infinitely 
often meet, all the nodes of Q are infinitely often visited. 

Case 2.2: There exist an infinite number of 2-long-lived towers in £. 

By Lemmas 10.12 and 10.13, we know that between two consecutive 2-long-lived tow¬ 
ers (from the second one), all the nodes of Q are visited. As there is an infinite number 
of 2-long-lived towers, the nodes of Q are infinitely often visited. 

Case 3: There does not exist a long-lived tower in £. 

Then, we know, by Lemma 10.8, that £ contains only configurations with either three 
isolated robots or one 2-short-lived tower and one isolated robot. 

We want to prove the following property. If during the Look phase of time t, a robot r is 
located on a node u considering the global direction gd, then there exists a time t' > t such 
that, during the Look phase of time t', a robot is located on the node v adjacent to u in the 
global direction gd and considers the global direction gd. 

Let f” > t be the smallest time after time t where the adjacent edge of u in the global 
direction gd is present in Q. As all the edges of Q are infinitely often present, t” exists. 

(i) If r crosses the adjacent edge of u in the global direction gd during the Move phase of 
time f”, then the property is verified. 

(ii) If r does not cross the adjacent edge of u in the global direction gd during the Move 
phase of time f”, this implies that r changes the global direction it considers during the 
Look phase of time t. While executing §§_PEF_3, a robot can change the global direction 
it considers only during Compute phases of times where it is edge-activated and involved in 
a tower. Let t ac t > t be the first time after time t such that during the Move phase of time 
tact > r does not consider the global direction gd. Let r' be the robot involved in a tower with 
r at time t ac t■ Since there are only 2-short-lived towers in the execution, the two robots r 
and r' consider two opposed global directions during the Move phase of time t ac t ■ Therefore 
during the Move phase of time t ac t , r' is on node u considering the global direction gd. By 
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applying case (ii) by recurrence, we can say that from the Move phase of time t to the Move 
phase of time t” there always exists a robot on node u considering the global direction gd. 
Therefore during the Move phase of time t” a robot moves on node v. Since the robot does 
not change the global direction they consider during Look phases, during the Look phase 
of time t" + 1 this robot still considers the global direction gd. 

This proves the property. By applying recurrently this property to any robot, we prove that 
all the nodes of Q are infinitely often visited. 

Thus, we obtain the desired result in every case. □ 

Lemma 10.16. SS_PEF_3 satisfies the perpetual exploration problem in COT\lZ£ rings of 
arbitrary size under M se if-stabilizing exploration using three robots. 

Proof. Consider that Q is a COTfiR.8 ring. This implies that there exists exactly one eventual 
missing edge e in Q. Denote by 8' the maximal suffix of 8 in which the eventual missing edge 
never appears. Let t m i SS i ng the time after which e never appears again. Let us study the following 
cases. 

Case 1: There exists at least one 3-long-lived tower in £'. 

According to Lemma 10.7, this 3-long-liver tower is broken in finite time. Moreover, once 
this tower is broken, according to Lemma 10.10, it is impossible to have a configuration 
containing a 3-long-lived tower. Then, £' admits an infinite suffix that matches either case 
2 or 3. 

Case 2: There exists at least one 2-long-lived tower in £'. 

Case 2.1: There exists a finite number of 2-long-lived towers in £'. 

According to Lemma 10.7, the last 2-long-lived tower is broken in finite time. Since by 
Lemma 10.10, it cannot exist 3-long-lived tower in £', then S' admits an infinite suffix 
with no long-lived tower hence matching Case 3. 

Case 2.2: There exist an infinite number of 2-long-lived towers in £'. 

By Lemmas 10.12 and 10.13, we know that between two consecutive 2-long-lived tow¬ 
ers (from the second one), all the nodes of Q are visited. As there are an infinite 
number of 2-long-lived towers, all the nodes of Q are infinitely often visited. 

Case 3: There does not exist a long-lived tower in 8 '. 

By Lemma 10.8, all configurations in 8' contain either three isolated robots or one 2-short- 
lived tower and one isolated robot. 

(1) We want to prove the following property. If during the Look phase of a time t in 8', a 
robot considers a global direction gd and is located on a node at a distance d 0 in G (G is 
the footprint of Q) from the extremity of e in the global direction gd , then it exists a time 
t' > t such that, during the Look phase of time t! , a robot is on a node at distance d — 1 in 
G from the extremity of e in the global direction gd and considers the global direction gd. 
Let v be the adjacent node of u in the global direction gd. 

Let t" > t be the smallest time after time t where the adjacent edge of u in the global 
direction gd is present in Q. As all the edges of Q except e are infinitely often present and 
as u is at a distance d 0 in G from the extremity of e in the global direction gd, then the 
adjacent edge of u in the global direction gd is infinitely often present in Q. Hence, t” exists. 

( i ) If r crosses the adjacent edge of u in the global direction gd during the Move phase of 
time t”, then the property is verified. 
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(ii) If r does not cross the adjacent edge of u in the global direction gd during the Move 
phase of time t”, this implies that r changes the global direction it considers during the 
Look phase of time t. While executing §§_PEF_3, a robot can change the global direction 
it considers only during Compute phases of times where it is edge-activated and involved in 
a tower. Let t ac t > t be the first time after time t such that during the Move phase of time 
tact > r does not consider the global direction gd. Let r' be the robot involved in a tower with 
r at time t ac t. Since there are only 2-short-lived towers in the execution, the two robots r 
and r' consider two opposed global directions during the Move phase of time t ac t • Therefore 
during the Move phase of time t ac t, r' is on node u considering the global direction gd. By 
applying case (ii) by recurrence, we can say that from the Move phase of time t to the Move 
phase of time t” there always exists a robot on node u considering the global direction gd. 
Therefore during the Move phase of time f ” a robot moves on node v. Since the robot does 
not change the global direction they consider during Look phases, during the Look phase 
of time t” + 1 this robot still considers the global direction gd. 

This proves the property. 

(2) We now want to prove that there exists a time t reac hExtremities i n £' from which one 
robot is forever located on each extremity of e pointing to e. 

First, we want to prove that a robot reaches one of the extremities of e in a finite time after 
tmissing and points to e at this time. If it is not the case at time t rnissing , then there exists at 
this time a robot considering a global direction gd and located on a node u at distance d ^ 0 
in G from the extremity of e in the global direction gd. By applying d times the property 

(1) , we prove that, during the Look phase of a time t reac h > tmissing , a robot (denote it r) 
reaches the extremity of e in the global direction gd from u (denote it v and let v' be the 
other extremity of e), and that this robot considers the global direction gd during the Look 
phase of time t reac h- 

Then, we can prove that from time t reac h there always exists a robot on node v considering 
the global direction gd. Indeed, note that no robot can cross e in the global direction gd 
from time t reac h since e is missing from time t rnlss i ng . Moreover while executing §§_PEF_3, 
a robot can change the global direction it considers only during Compute phases of times 
where it is edge-activated and involved in a tower. Therefore if at a time t change > t m i ss i ng , 
r changes the global direction it considers at time t reac h this is because it is involved in 
a tower. Since there are only 2-short-lived towers in the execution, at time t c hangei r is 
involved in a tower with a robot r', and r and r' consider two opposed global directions 
during the Move phase of time tchange- Therefore during the Move phase of time tchange, f' 
is on node v considering the global direction gd. By applying this argument by recurrence, 
we can say that from time t reac h there always exists a robot on node v considering the global 
direction gd. 

Now we prove that this is also true for the extremity v' of e. If there exists at time t reac h a 
robot on node v' considering the global direction gd, or if it exists a robot considering the 
global direction gd on a node v! at distance d ^ 0 in G from v' in the global direction gd, 
then by using similar arguments as the one used for v, we can prove the property (2). If this 
is not the case, this implies that at time t reac h all the robots consider the global direction 
gd. Then in finite time (after time t reac h) by the property (1), a robot reaches node v. Since 
from time t reac h there is always a robot on node v, there is a 2-short-lived tower formed. 
Then by definition of a 2-short-lived tower, there exists a time at which one of the robots 
of this tower considers the global direction gd while the other considers the global direction 
gd. Then we can use the same arguments as the one used previously to prove the property 

( 2 ) . 

(3) It stays to prove that in the Case 3 all the nodes are infinitely often visited. We know 
that from time t reac hE x tremities one robot is forever located on each extremity of e point- 
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ing to e. Call r” the robot that is not on node v (resp. v' ) and pointing to e at time 
treachExtremities ■ Assume, without lost of generality, that at time t reachE xtremities , r” is on 
node v! and considers the global direction gd. Then by applying recurrently the property 
(1) we can prove that, in finite time, all the nodes between the current node of r” at time 
treachExtremities and v in the global direction gd are visited and that r” reaches v. Call 
t'act > treachExtremities , the first time after time treachExtremities where there are two robots 
on node v that are edge-activated. At time t' act , the robot that is on node v and pointing to 
e at time treachExtremities changes the global direction it considers (hence considers gd) by 
construction of §§_PEF_3 and since the tower formed is a 2-short-lived tower. 

We can then repeat this reasoning (with v and v' alternatively in the role of v! and with v' 
and v alternatively in the role of v) and prove that all nodes of Q are infinitely often visited. 

Thus, we obtain the desired result in every case. □ 

To conclude the proof, first note that even if the robots can start in a non coherent state, it 
exists a time t max from which all the robots of the system are in a coherent state (by Lemma 10.2). 
Then it is sufficient to observe that a COT ring is by definition either a ST ring, a 1Z£\ST ring, 
or a COT\R£ ring. As we prove the correctness of our algorithm from the time the robots are in 
a coherent state in these three cases in Lemmas 10.14, 10.15, and 10.16 respectively, we can claim 
the following final result. 

Theorem 10.3. SS_PEF_3 is a self-stabilizing perpetual exploration algorithm for COT rings 
of arbitrary size (greater or equal to four) under M se i f stabilizing exploration using three robots. 


10.4 Speculative Aspect of §§ PEF 3 

In this section we prove that SS_PEF_3 is a speculative algorithm. As indicated in Sec¬ 
tion 8.3, the cover time of any perpetual exploration algorithm in COT rings is unbounded (since 
it is possible, in a COT graph, to have initially and during an arbitrary long time all the edges of 
the graph missing). Since, by Theorem 10.3, §§_PEF_3 solves the perpetual exploration prob¬ 
lem in COT rings, and since its cover time in COT rings is unbounded, the following lemma is 
sufficient to prove that 8§_PEF_3 is a speculative algorithm for the perpetual exploration prob¬ 
lem with respect to ST and COT , in function of the cover time in rounds. Indeed, in the lemma 
below, we prove that the cover time of §S_PEF_3 in ST rings is bounded. 

Lemma 10.17. Our algorithm §§_PEF_3 under M. self-stabilizing exploration > using 3 robots in 
any ST ring of size n has a cover time in 0(n ) rounds. 

Proof. First note that in the case of a ST ring, t max = 2. 

While executing §§_PEF_3, a robot considers a direction (right or left) at each round. More¬ 
over, a robot does not change the global direction it considers if its variable HasMovedPrevious- 
EdgeActivation is true. The variables of a robot are updated during Compute phases of times 
where it is edge-activated. Since the ring is a ST ring, this implies that in each round all the 
robots are edge-activated and are able to move whatever the direction they consider. So, af¬ 
ter t max their variables HasMovedPreviousEdgeActivation are always true. Hence, the robots 
never change their directions after this time. 

As (i) the robots have a stable direction, (ii) they always consider respectively the same global 
direction, and (in) there always exists an adjacent edge to their current locations in the global 
direction they consider, the cover time is equal to n + t max rounds. Since n + 2 is in 0(n ), this 
proves the lemma. □ 
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We now prove that the cover time of §§_PEF_3 is moreover asymptotically optimal when 
executed in ST rings (see Lemma 10.18). To do so, we show that the cover time of any self- 
stabilizing deterministic algorithm solving the perpetual exploration problem in ST rings of size 
n using 7 Z robots is equal to the cover time of our algorithm (proved in Lemma 10.17). 

Lemma 10.18. Any self-stabilizing deterministic algorithm under Ad se if- stabilizing exploration us¬ 
ing 1Z robots, satisfying the perpetual exploration problem in ST rings of size n has a cover time 
in 17(n) rounds. 

Proof. Assume, by contradiction, that there exists a self-stabilizing deterministic algorithm A 
using 1Z robots, satisfying the perpetual exploration problem in ST rings of size n, that possesses 
a cover time less or equals to r = |n/ 2 J — 1 rounds. 

Consider the execution of A in a ST ring of size n such that initially all the robots are on the 
same node x. Call 7 this initial configuration. 

Call y a node at distance |_u/ 2 j of x. 

Since each robot can cross at most one edge at each round, this implies that each robot can 
explore at most \n/2 J — 1 different nodes in r rounds during the execution of A starting from 
7 . Note that all the nodes visited by a robot are consecutive nodes. Therefore, whatever the 
direction considered by each of the robots, none of them succeed to visit the node y during the 
r first rounds of the execution of A starting from 7 . Hence there is a contradiction with the 
fact that A is a self-stabilizing deterministic algorithm using 1Z robots, satisfying the perpetual 
exploration problem in ST rings of size n and having a cover time less or equals to \n/2 J — 1 
rounds. 

This implies that there is no self-stabilizing deterministic algorithm satisfying the perpetual 
exploration problem in ST rings of size n, using 7 Z robots and having a cover time less or equals 
to \n/2\ — 1 rounds. Hence, since \n/2\ — 1 is in H(n), the lemma is proved. □ 

To conclude, as explained at the beginning of this section, and thanks to the two previous 
lemmas, we can deduce the following theorem. 

Theorem 10.4. §§_PEF_3 is a speculative algorithm under Ai se if- stabilizing exploration for the 
perpetual exploration problem with respect to ST and COT, in function of the cover time in 
rounds, and its cover time in ST rings is asymptotically optimal. 

10.5 Sufficiency of Two Robots for n = 3 

In this section, we present SS_PEF_2, a self-stabilizing algorithm solving deterministically 
the perpetual exploration problem in COT rings of size equal to three, using two robots possessing 
distinct identifiers. 

Here, we only consider two robots. Hence, it is not possible to apply the “sentinels”/“visitor” 
scheme anymore (that requires three robots to be applied). In §§_PEF__3, a robot does not 
change its direction (arbitrarily initialized) while it is isolated. Here, it is not possible to apply 
this rule, otherwise the two robots may be stuck forever on two different extremities of an eventual 
missing edge. When there exists an adjacent present edge to the direction pointed to by a robot 
then it does not change its direction. However, when a robot is isolated and stuck (i.e., its 
direction points to an adjacent missing edge) it changes its direction if there exists an adjacent 
present edge to its location. These two behaviors are enough to permit the perpetual exploration 
in the case where the robots do not form a long-lived tower or in the case where they form a 
long-lived tower that is not stuck forever. Similarly as in 8§_PEF_3, if the two robots form a 
long-lived tower and are stuck on their node, the “tower breaking” scheme is applied to break this 
tower. 

This algorithm and its proof of correctness make use of definitions, variables, and predicates 
defined in Subsections 10.3.1 and 10.3.2 and of the following new predicate. 
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I AmStuckAloneOnMyNodeQ = 

(N umberO f RobotsOnNode() = 1) 
A -■ ExistsEdge(dir, current) 

A ExistsEdge(dir, current) 


Algorithm 10.4 §§_PEF_2 

1: StuckTogether :: WeAreStucklnTheSameDirectionQ —» GiveDirection(); Update() 
2: StuckAlone :: IAmStuckAloneOnMyNodeQ —> OppositeDirection(); Update() 

3: Update :: true —» Update() 


The pseudo-code of §§_PEF_2 is given in Algorithm 10.4. 

Proof of correctness We now prove the correctness of this algorithm. 

First, note that Lemmas 10.2, 10.3, and 10.4 are also true for §§_PEF_2. 

To show the correctness of §S_PEF_2, we need to introduce some lemmas. We consider that 
the two robots executing SS_PEF_2 are ri and r 2 - Let t\ , and t 2 be respectively the time at 
which the robots n and r 2 are in a coherent state. Let t ma x = max{ti,t 2 }- From Lemma 10.2, 
the two robots are in a coherent state from t max . In the remaining of the proof, we focus on 
the suffix of the execution after t m ax • The other notations correspond to the ones introduced in 
Section 10.3. 

Lemma 10.19. Every execution starting from a configuration without a 2-long-lived tower cannot 
reach a configuration with a 2-long-lived tower. 

Proof. Assume that £ starts from a configuration which does not contain a 2-long-lived tower. By 
contradiction, let C be the first configuration of £ containing a 2-long-lived tower T = (5, [t s ,t e ]). 

Let t ac t > t s be the first time after time t s where the 2 robots of T are edge-activated. By 
definition of a long-lived tower, t ac t exists. 

For a 2-long-lived tower to be formed at time t s , r\ and r 2 must meet at time t s . While exe¬ 
cuting §§_PEF_2, the two robots can meet at time t s only because they are moving considering 
opposed global directions during the Move phase of time t s — 1. Therefore, since the variables of 
a robot are updated only during Compute phases of time where it is edge-activated, during the 
Look phase of time t. ac t, the predicates WeAreStucklnTheSam.eDirectionQ of the two robots 
are false (since their variables HasMovedPreviousEdgeActivation are true). Moreover, during 
the Look phase of time t ac t the predicates I AmStuckAloneOnMyN ode () of the two robots are 
false (since their predicates NumberOfRobotsOnNodefi) is not equal to 1). Hence during the 
Move phase of time t. ac t the two robots still consider two opposed global directions. Therefore T 
is broken at time t ac t, which leads to a contradiction with the fact that T is a 2-long-lived tower. 
This proves the lemma. □ 

Let tacti (resp. t ac t 2 ) be the first time in the execution at which the robot r\ (resp. rfi) is 
edge-activated. By definition, we have t\ = t ac ti + 1 and t 2 = t ac t 2 + 1- By Lemma 10.19, if there 
exists a 2-long-lived tower in £, then this 2-long-lived tower is present in the execution from time 
to = 0. In this case t± = t -2 = t max and at time t max — 1 the robots are edge-activated for the first 
time of the execution. 

Lemma 10.20. The robots of a long-lived tower T = (S, [t s ,t e ]) consider the same global direction 
at each time between the Look phase of round t max and the Look phase of round t e included. 

Proof. Consider a long-lived tower T = (5, [t s ,t e \). We know that t s = t-o = 0, that t\ = t .2 = t max 
and that at time t max — 1 the robots are edge-activated for the first time of the execution. During 
the Move phase of time t max ~ 1, the two robots consider the same global direction, otherwise 
there is a contradiction with the fact that T is a 2-long-lived tower. 
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When executing §§_PEF_2, a robot can change the global direction it considers only when 
it is edge-activated. Besides, during the Look phase of a time t a robot considers the same global 
direction as the one it considers during the Move phase of time t — 1. 

Consider a time t G [t m ax , t e [. If at time t the robots of S are not edge-activated, then during 
the Move phase of time t the robots of S do not change the global direction they consider. 

If at time t the robots of S are edge-activated, then during the Move phase of time t, since 
t.^t e , the robots of S consider the same global direction, otherwise there is a contradiction with 
the fact that T is a long-lived tower from time t s to time t e . 

Since during the Move phase of time t max — l the robots of S consider the same global direction 
using the two previous arguments by recurrence on each time t G [t ma xTe[ and the fact that 
robots change the global directions they consider only during Compute phases, we can conclude 
that the robots of S consider the same global direction from the Look phase of time t ma x to the 
Look phase of time t e included. □ 

Lemma 10.21. For any long-lived tower T = (S, [i s , t e }), and any t < t e , such that the robots of 
S have been edge-activated twice between t s included and t not included, we have WeAreStuck- 
InTheSameDirection() rit t = WeAreStuckInTheSameDirection() r2 j- 

Proof. Consider a long-lived tower T = (5, [t s , t e ]). We know that t s = to = 0, that t\ = t 2 = t max 
and that at time t max — 1 the robots are edge-activated for the first time of the execution. Assume 
that between t s included and t e not included, the robots of T are edge-activated two or more 
times. 

By definition of a long-lived tower and by lemma 10.20, from the Look phase of time t max 
to the Look phase of time t e included, all the robots of S are on the same node and consider 
the same global direction. Therefore the values of their respective predicates NumberO f Robots- 
OnNode (), ExistsEdge(dir, current ) and ExistsEdge{dir , current ) are identical from the Look 
phase of time t max to the Look phase of time t e included. 

Let t ac t. > t max be the first time after t max such that the robots of T are edge-activated. By as¬ 
sumption, tact exists. When executing §§_PEF_2, a robot updates its variables HasMovedPre- 
viousEdgeActivation and NumberRobotsPreviousEdgeActivation respectively with the values 
of its predicates ExistsEdge(dir, current) and NumberO f RobotsOnN ode(), only during Com¬ 
pute phases of times when it is edge-activated. Therefore, from the Look phase of time t ac t + 1 
to the Look phase of time t e included, the robots of S have the same values for their variables 
HasM ovedPreviou-sEdge Activation and Number Robots Previous Edge Activation. 

The predicate WeAreStuckInTheSam.eDirection{ ) depends only on the values of the vari¬ 
ables HasM ovedPreviousEdge Activation, Number RobotsPreviousEdgeActivation and on the 
values of the predicates NumberOf RobotsOnNode(), ExistsEdge(dir, current), and Exists- 
Edge(dir, current). As seen previously, all these values are identical for all the robots of S 
from the Look phase of time t ac t + 1 until the Look phase of time t e included. This proves the 
lemma. □ 

From the Lemmas 10.21, 10.3 and 10.4, by noticing that the robots of a long-lived tower T 
cannot have their predicates IAmStuckAloneOnMyNode{ ) true as long as they are involved in 
T, we can again obtain the corollary 10.1 (the proof is not exactly the same since the predicate 
IWasStuckOnMyNodeAndNowWeAreMoreRobotsQ does not exist in §§_PEF_2, however 
the proof is very similar, therefore not repeated in this section). 

Theorem 10.5. §§_PEF_2 is a deterministic self-stabilizing perpetual exploration algorithm 
for COT rings of size equals to 3 under M se if stabilizing exploration using 2 robots. 

Proof. Consider that Q is a COT ring of size 3. First note that even if the robots can start in 
a non-coherent state, by Lemma 10.2, it exists a time t max from which all the robots are in a 
coherent state. Let us study the following cases occurring when the robots are in a coherent 
state. 
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Case 1 : There exists at least one 2-long-lived tower in £. 

By Lemma 10.19, once a 2-long-lived tower is broken, it is not possible to have again a 
2-long-lived tower in £. Therefore there exists only one 2-long-lived tower T in £. 

If T has a finite duration, then by Lemma 10.19, £ admits an infinite suffix with no long- 
lived tower hence matching Case 2. 

If T has an infinite duration, the robots of T eventually have their predicates WeAreStuck¬ 
lnTheSameDirectionQ always false, otherwise, by the contrapositive of Corollary 10.1, T 
is broken in finite time, which leads to a contradiction. Let tfalse be the time from which 
the robots of T have their predicates WeAreStucklnTheSameDirectionQ always false. 
After time tfalse the robots of T never change the global direction they consider (since 
their predicates IAmStuckAloneOnMyNodeQ cannot be true). Moreover, after time tf a i se 
there exists infinitely often an adjacent edge to the location of T in the global direction 
considered by the robots of T, otherwise there exists a time after tf a i se when the predicates 
WeAreStucklnTheSameDirectionQ of the robots of T are true, which is a contradiction. 
Hence after time tfalse the robots of T are infinitely often able to move in the same global 
direction. Since Q has a finite size, all the robots visit infinitely often all the nodes of Q. 

Case 2: There does not exist a long-lived tower in £. 

If there is no long-lived tower, this implies that if a tower is formed, then it is a 2-short-lived 
tower. By the connected-over-time assumption, each node has at least one adjacent edge 
infinitely often present. This implies that any short-lived tower is broken in finite time. 
Two cases are now possible. 

Case 2.1: There exists infinitely often a 2-short-lived tower in the execution. 

Note that, if a tower is formed at a time t, then the three nodes have been visited 
between time t — 1 and time t. Then, the three nodes are infinitely often visited 
by a robot in the case where there exists infinitely often a 2-short-lived tower in the 
execution. 

Case 2.2: There exists a time ti so i atec j after which the robots are always isolated. 

By contradiction, assume that there exists a time t! after which a node u is never 
visited. This implies that, after time max{ti so i ate d,t'}i either the robots are always 
switching their position or they stay on their respective nodes. 

In the first case, during the Look phase of each time greater than max{ti so i ate d, t'}, 
the respective variables dir of the two robots contain the direction leading to u (since 
each robot previously moves in this direction). As at least one of the adjacent edges 
of u is infinitely often present, a robot crosses it in a finite time, that is contradictory 
with the fact that u is not visited after t!. 

The second case implies that both adjacent edges to the location of both robots are 
always absent after time ti so iated (since an isolated robot moves as soon as it is possible, 
by definition of the predicate IAmStuckAloneOnMyNodeQ ), that is contradictory 
with the connected-over-time assumption. 

Thus, we obtain the desired result in every case. □ 

10.6 Summary 

In this chapter, we addressed the open question: “What is the minimal size of a swarm of 
self-stabilizing robots to perform perpetual exploration of highly dynamic graphs?” We give the 
first answer to this question by exhibiting the necessary and sufficient numbers of such robots to 
perpetually explore any COT ring. More precisely, we showed that the necessary and sufficient 
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numbers of robots to explore perpetually COT rings proved in the previous chapter in a fault-free 
setting (two robots for COT rings of size three and three robots for COT rings of size four or 
more) still hold in the self-stabilizing setting at the price of the loss of anonymity of robots. 

The cover time of any exploration algorithm in COT graphs is unbounded. However, our 
algorithm using three self-stabilizing robots is speculative: even if its cover time is unbounded in 
COT rings, it is bounded in ST rings. More precisely, its cover time is asymptotically optimal in 
ST rings. Therefore, our algorithm solves the perpetual exploration problem in a self-stabilizing 
way in highly dynamic environments and it solves it in a very efficient way (even when robots 
may be subject to transient faults) when being executed in static environments. 

Our algorithms are the first self-stabilizing algorithms for the problem of exploration, either 
for static or for dynamic graphs. Moreover our study is the first one to consider the speculative 
aspect of self-stabilizing algorithms in robot networks. 
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Conclusion on Speculation 
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Speculative algorithms may be executed in multiple environments and in environments that 
vary with time. They are used to circumvent high lower bounds (obtained when considering 
some environments): they solve the problem studied in all the environments considered and they 
provide good lower bounds to the problem in the most frequent environments in which they will 
be executed. The goal of this part was to extend the speculative approach to robot networks 
evolving in dynamic graphs. On this purpose, we have considered the perpetual exploration 
problem in dynamic rings. 

In this part, we first have presented the state of the art about speculative algorithms and 
about the exploration problem in dynamic graphs. This state of the art has highlighted that 
(i) there is no algorithm using robots that are speculative; ( ii ) there is no algorithm solving the 
exploration problem while considering robots evolving in COT graphs; and ( in ) there is no self- 
stabilizing algorithm (i.e., algorithm tolerating arbitrary faults such that there exists a time from 
which these faults no longer occur) solving the exploration problem neither in static graphs nor 
in dynamic graphs. 

In this part we have filled the lack of the state of the art concerning these three points. Indeed, 
in Chapter 9, we have characterized the necessary and sufficient number of robots permitting to 
solve the perpetual exploration problem in COT rings. More precisely, we have proved that two 
anonymous non-faulty robots are necessary and sufficient to perpetually explore COT rings of size 
three, and that three anonymous non-faulty robots are necessary and sufficient to perpetually 
explore COT rings of size four or more. Our results on the sufficiency are constructive: we 
have provided an algorithm solving the perpetual exploration problem in each case. Our general 
algorithm (the one used in rings of size four or more) is, moreover, a speculative algorithm: it 
solves the perpetual exploration problem in COT rings with an unbounded cover time (and it is 
not possible to do better, refer to Section 8.3), but when being executed in ST rings, its cover 
time is bounded and asymptotically optimal. 

In Chapter 10, we have proved that the number of non-faulty (anonymous) robots necessary 
to solve the perpetual exploration problem in COT rings is equal to the number of self-stabilizing 
(identified) robots necessary to solve the perpetual exploration problem in COT rings. We have 
also proved that these numbers of robots are sufficient by providing two self-stabilizing algo¬ 
rithms. Our algorithm using three self-stabilizing robots and solving the perpetual exploration 
problem in COT rings of size four or more is a speculative algorithm. Like the algorithm in the 
fault-free setting, this algorithm has a bounded and asymptotically optimal cover time when it is 
executed in ST rings. 

In Chapters 9 and 10, our study was only in COT rings. However, our analysis can be ex¬ 
tended easily to any COT graph. We present in the section below how to extend our work to 
general COT graphs. 
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11.1 Generalization: Exploration in arbitrary Highly Dynamic 
Graphs 

In this section, we sketch the extension of our work on the characterization on the neces¬ 
sary and sufficient number of robots permitting to solve the perpetual exploration problem in 
COT rings to any COT graph. The sufficiency is based on a generalization of Algorithm PEF_3+. 
Our algorithm, solving the perpetual exploration problem in any COT graph, uses non-faulty 
anonymous robots. The necessity is based on a generalization of the impossibility proofs given 
in Section 9.3.1 (which states that two non-faulty anonymous robots cannot perpetually explore 
COT rings of size 4 or more) and in Section 9.4 (which states that one non-faulty anonymous 
robot cannot perpetually explore COT rings of size 3 or more). 

Necessity. In Chapter 9, we have proved that three non-faulty anonymous robots are necessary 
to perpetually explore any COT ring (of size four or more). In a COT ring, there is at most one 
eventual missing edge. 

From this result, we can conjecture that two (non-faulty anonymous) robots per eventual 
missing edge are needed to “mark” these missing edges, and that one additional robot is necessary 
to solve the perpetual exploration problem. In other words, we can conjecture that, if there are 
at most k eventual missing edges in a COT graph Q, then 2k + 1 robots are necessary to solve the 
perpetual exploration problem in Q. 

This conjecture is reinforced by the fact that, in the article of Flocchini et al. [86] (refer to 
Section 8.2.2), if there is no black hole (but there are black edges that make disappear the robots), 
then the number of robots used by their algorithm to explore the graph is strictly greater than 
two times the number of black edges. 

This intuition can be easily proved by repeating the exact same arguments than the one used 
in the impossibility proofs of Section 9.3.1 and of Section 9.4 on the following kinds of graphs 
(also refer to Figure 11.1): 

Definition 11.1 (Daisy graph). A daisy graph G satisfies: 

• Each cycle of G is simple and contains at least four nodes. 

• G has at least two cycles. 

• There is only one node in G (called the central node) having a degree greater or equal to 
four. 

If a COT graph Q is based on a daisy graph G composed of k simple cycles, then there are at 
most k eventual missing edges in Q. Indeed, if there were more than k eventual missing edges in Q, 
then the eventual underlying graph of Q would possess at least two distinct connected components 
and it would not be possible for a node to reach over time any other node infinitely often (which 
is the property that COT graphs should respect). To prove that 2k + 1 robots are necessary to 
solve the perpetual exploration problem in Q, we prove that a number of robots less or equal to 2k 
is not able to solve this problem in Q. To do so, we initially place the robots in a round robin way 
on each of the simple cycles such that no robot is on the central node. Note that, initially, there 
are at most two robots per simple cycle. If there are two robots on a simple cycle, we apply (on 
this cycle) the same arguments than the one used in Section 9.3.1 that prove that a cycle of four 
nodes or more cannot be perpetually explored by two robots. This result was proved by showing 
that at least one node is never visited (because of missing edges that cannot be distinguished 
from eventual missing edges and force robots to find a different path to explore the cycle). We 
take back the arguments of this proof in order to prevent the central node to be visited by the 
robots (refer to Figure 11.2). If there is one robot on a simple cycle, we apply (on this cycle) the 
same arguments than the one used in Section 9.4 that state that a cycle of three nodes or more 
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Figure 11.1: Example of a daisy graph possessing 4 cycles of size 4. 

Legend : 

• Robots 



Figure 11.2: Example of the initial placement of 8 robots on a dynamic daisy possessing 4 cycles 
of size 4. 


cannot be perpetually explored by one robot. This result was proved by showing that at least one 
node is never visited. We take back the arguments of this proof in order to prevent the central 
node to be visited by the robot during its execution. Hence, none of the robots succeed to visit 
the central node. 

Therefore, at least 2k + 1 robots are needed to solve the perpetual exploration problem in 
COT graphs. 

Sufficiency. In this paragraph, we present intuitively an algorithm solving the perpetual ex¬ 
ploration problem in any COT graph Q using a number of robots at least equal to two times 
the maximal number of possible eventual missing edges in Q plus one. To belong to COT , the 
eventual underlying graph of a dynamic graph should be connected. Hence, in the worst case, the 
eventual underlying graph of a COT graph may be a tree (which possesses n — 1 edges), implying 
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that n — 1 of the edges of its footprint cannot be eventual missing edges. Therefore, the maximal 
number of eventual missing edges of a dynamic graph is equal to m - n + 1, where m is the total 
number of edges of its footprint. Hence, in other words, at least 2 * (m — n+1) +1 robots are used 
by our algorithm. Note that the robots used by our algorithm do not need to know the number 
of eventual missing edges of the dynamic graph, they just need to be sufficiently numerous to 
succeed to solve the perpetual exploration problem. We have studied neither the self-stabilizing 
aspect nor the speculative aspect of this algorithm. 

We consider any undirected COT graph. We assume that the nodes of the graphs are divided 
into multiple parts: one for each port of the nodes and one at the middle of the nodes (like this is 
done in some articles of the state of the art [125, 99]). Moreover, similarly as Di Luna et al. [125] 
and Gotoh et al. [99], we assume that the robots have access to each port of their current node 
in mutual exclusion. We assume that the robots are fully-synchronous, anonymous, and do not 
have the same chirality. We assume that each robot is able to know the exact number of robots 
located on each part of their current node. 

Each robot executes a kind of BFS (Breadth-First Search) [103, 16] which consists in explor¬ 
ing all the adjacent nodes of a current node prior to continuing the exploration in the same way on 
these adjacent nodes. Each time a robot wants to move in a direction, it moves to the correspond¬ 
ing port in the node. Once a robot is on a port, it stays on this port until the edge connected to 
this port appears. If this edge never appears, then the robot is stuck and has the role of a sentinel 
that marks an extremity of an eventual missing edge. If there are at most k eventual missing 
edges, then at most 2k robots are stuck on each extremity of the eventual missing edges. It re¬ 
mains at least one robot that explores infinitely often each of the nodes of the COT graph: the 
non-stuck robots execute infinitely often a BFS ignoring the ports that are occupied by robots. 


11.2 Perspectives 

Short-term perspectives. The algorithms we provided in this part use robots with very few 
capacities: when the robots are not subject to faults, they are fully-synchronous, anonymous, 
endowed with weak multiplicity detection and do not have the same chirality; when the robots 
may be subject to faults, they are fully-synchronous, identified, endowed with strong multiplicity 
detection and do not have same chirality. Even if the models of robots induced by these compu¬ 
tational model and capacities are strong, it could be interesting to study the necessity of these 
assumptions, and particularly to study the perpetual exploration problem in other models. 

The perpetual exploration problem is not comparable to the other forms of exploration (ex¬ 
ploration with stop problem, and exploration with return problem), hence doing a similar study 
as ours for these kinds of exploration is the next step to take. At the opposite, the exclusive 
perpetual exploration problem is a stronger problem than the perpetual exploration problem, 
therefore the speculative aspect of this problem in dynamic graphs may be studied to complete 
our analysis. 

In this part, we have focused on the speculative aspect for ST and COT graphs. However, 
the definition of speculation is more general and may be applied to multiple classes of dynamic 
graphs. Studying the speculative aspect of our algorithms in other classes of dynamic graphs is a 
short-term perspective. 

Finally, in the previous section, we provide an algorithm solving the perpetual exploration 
problem in COT graphs, but we did focus neither on the self-stabilizing aspect nor on the specu¬ 
lative aspect of this algorithm. We should analyze this. 


Long-term perspectives. In addition to be speculative, one may observe that our algorithms 
(for non-faulty robots as well as for self-stabilizing robots) are optimal for the cover time we con¬ 
sidered (bounded and unbounded) and the classes of dynamic graphs we studied: our algorithms 
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provide the best cover time (among the one we studied) in ST and COT rings. We can generalize 
this intuition with the following notion: 

Definition 11.2 (Optimal speculative algorithm). Given a model M, a problem V, a set T = 
{/o,.. •, fk} of functions, with \ T\ >2 , a set Sc = {Co,..., C k } of classes of dynamic graphs such 
that: 

1. \S C \ > 2. 

2. For all i, with 0 < i < k — 1, C* C C k - 

3. For all i, with 0 < i < k, if Ci C Cj then fi\c t € 0(fj\c J )• 

4■ There exists at least one i, with 0 < i < k — 1, such that V is not solvable in 0(./i|c ( ) in C k 
(implying that fi\ Ci € o(f k \c k ))- 

a (' P , T, Sc)-optimal speculative algorithm A for V under M. is such that: 

• A is a (V,T, Sc)-speculative algorithm for V under M. 

• For all i, with 0 < i < k, if Ci C Cj and A does not solve V under M. in 0(/j|e ; ) in Cj this 
is because V is not solvable in 0(/j|e ; ) in Cj graphs under M.. 

Our algorithms are then optimal speculative perpetual exploration algorithms with respect 
to ST and COT. A long-term perspective is to analyze if our algorithms are optimal speculative 
algorithms (for non-faulty and self-stabilizing robots) with respect to classes of dynamic graphs 
other than ST and COT. 

Similarly, for all the problems that are solvable in COT graphs, and that admit speculative 
solutions, it could be interesting to find solutions that are optimal speculative algorithms. 

The previous definition does not exclude the possibility for an algorithm to be an optimal 
speculative algorithm solving the problem studied with a measurement of performance different 
from the best possible. Therefore, we can define an optimum notion for a speculative algorithm: 
an optimum speculative algorithm is a speculative algorithm that solves the problem studied 
with the best measurement of performance possible in each of the classes of dynamic graphs 
considered. Such an algorithm is necessarily an optimal speculative algorithm. 

Our algorithms are optimum speculative algorithms with respect to ST and COT. Indeed, 
our algorithms solve the perpetual exploration problem with an unbounded cover time while 
being executed in COT rings (and it is not possible to do better, refer to Section 8.3) and they 
solve the perpetual exploration problem in an asymptotically optimal cover time in ST rings. 

The same perspectives as previously are possible to explore: study if our algorithms are 
optimum speculative algorithms in classes of dynamic graphs other than ST and COT ; and 
find optimum speculative algorithms for each of the problems solvable in COT graphs that admit 
speculative solutions. 
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Concluding Remarks 


Contents 
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12.1 Sum Up of the Main Parts 

In this thesis, we considered distributed systems, i.e., systems composed of multiple processes, 
each executing algorithms (ordered sequence of instructions) in an autonomous manner. Algo¬ 
rithms for distributed systems are hard to conceive since all the entities have to collaborate to 
solve a same task and each entity has to take decisions based its own vision of the system. How¬ 
ever, distributed systems are convenient: thanks to the multiple entities composing it, they are 
more tolerant to faults, it is possible to have some entities that are faulty and still be able to solve 
the wanted task. Moreover processes of a distributed system can divide between them parts of a 
same task making its execution quicker than if it was performed by a single process. 

Generally, the goal of the study of distributed systems is to determine the models (set of 
assumptions made on the distributed system) in which the problem considered is solvable and 
the ones in which it is impossible to solve; and find an algorithm for the models in which it is 
solvable. In particular, the classical approach is to conceive an algorithm for a specific model. 
There is no guarantee on a correct behavior of the algorithm in the case where it is executed in a 
model other than the one for which it was designed. 

In this thesis, we were interested in the study of algorithms that are conceived to be exe¬ 
cuted in multiple different models (i.e., they are not conceived only for a specific model). These 
algorithms adapt to the model in which they are executed. We present below some of these 
approaches that we considered in this thesis. 

Indulgent algorithms [5] are conceived to be executed even in models in which the problem 
studied is impossible to be solved: they guarantee correctness when the system is synchronous, 
and when the system is asynchronous and the problem studied becomes impossible then they 
maintain the safety of the problem. Hence, when the system is asynchronous, making the problem 
impossible, only a degraded version of the problem is considered. Therefore, indulgent algorithms 
are convenient when considering problems impossible in asynchronous systems and when the 
synchronicity of the environment in which they will be executed is not known in advance, or 
when the synchronicity of the environment changes with time. 

The indulgent approach only considers that the synchronicity of the system may be unknown 
in advance or change with time. However, many parameters may be unknown in advance or 
change with time. In particular, it is possible to represent some distributed systems thanks to 
dynamic graphs where the nodes represent the processes and the edges represent the possibility 
for two processes to communicate, and in which the nodes and edges appear and disappear with 
time. There exist, depending on the frequencies of appearance and disappearance of the nodes 
and edges, different kinds of dynamic graphs. There exists a classification that defines different 
kinds of dynamic graphs (in which only the edges may appear and disappear with time) [40, 38]. 
As a designer of algorithms, it is not always possible to know in which kind of dynamic graphs 
our algorithms are used. 
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The gracefully degrading approach [20] is based on the same principle as the indulgent ap¬ 
proach except that, instead of the synchronicity, this is the dynamics of the system that is con¬ 
sidered to be unknown in advance or to change with time. In other words, gracefully degrading 
algorithms guarantee correctness when they are executed in a dynamic system in which the prob¬ 
lem V studied is solvable but they satisfy weaker specifications than V that ensure its safety 
otherwise. Therefore, gracefully degrading algorithms are useful when considering problems im¬ 
possible in some kinds of dynamic graphs and when the dynamics of the system in which they will 
be executed are not known in advance, or when the dynamics of the system change with time. 

Moreover, generally, while studying distributed algorithms, only the worst case is analyzed: 
an upper bound (in the worst case) to solve the problem studied is computed. However, the worst 
case is not always the most frequent to happen. There exist in the literature speculative algo¬ 
rithms [114, 77, 9] which are algorithms optimized for the most frequent case: they satisfy the 
specification of the problem studied in any execution in which they are susceptible to be executed 
but also they are very efficient for the executions that are more likely to happen. The efficiency 
of a speculative algorithm is analyzed, depending on the context, thanks to a complexity in time, 
in memory, ... Note that even if speculative algorithms focus on optimizing the most frequent 
executions, it is an optimization of the worst case in order to provide an upper bound for all 
the most frequent executions. Speculative algorithms circumvent high lower bounds: the upper 
bound reached by a speculative algorithm to solve a problem in the most frequent environments 
is lower than the lower bound required to solve the problem considering all the possible environ¬ 
ments. Such algorithms are useful when the environment in which they will be executed is not 
known in advance and when it is possible to optimize the solutions of the problem studied for 
some of the executions. 

Graceful degradation and speculation are two orthogonal notions: the former permits to cir¬ 
cumvent impossibility results, while the latter focus on optimizing results in frequent executions. 
Generally, algorithms consider only the environments in which the problems studied are solv¬ 
able saying that the problematic environments (in which the problems are impossible) are not 
frequent. Therefore, we can say that the graceful degradation focus on not frequent executions 
while speculation focus on frequent one. Refer to Figure 12.1 to see an overview of these two 
notions. 

In this thesis, we studied distributed systems made of robots: the processes composing the 
distributed system are robots (autonomous entities able to move that are endowed with sensors to 
sense their environment). The robots we considered are evolving in dynamic graphs in which only 
the edges may appear and disappear with time and where the nodes represent the locations where 
the robots may be and the edges represent the possibility for a robot to move from one location 
to another one. There is no article studying the speculative or gracefully degrading aspects of 
algorithms using robots. The goal of this thesis was to determine if it was possible to apply 
these two approaches to robot networks, and more particularly to robots evolving in dynamic 
graphs. We answered positively to this interrogation: the main contribution of this thesis being 
the extension of the gracefully degrading and speculative notions to robot networks evolving in 
dynamic graphs. 

More precisely, in Chapter 6, we extended the gracefully degrading notion to robot networks 
evolving in dynamic graphs. In this chapter, we studied the gathering problem (in which all robots 
terminate their execution on the same node of the graph in finite and bounded time) in dynamic 
rings. This problem is a good case study, since it is impossible to solve in AC (graphs connected 
at each instant time) rings [122], We provided a gracefully degrading gathering algorithm. This 
algorithm solves the specification of the gathering problem in ST (in which each edge is present 
at each instant time) and B1ZS (in which each edge is present at least once every 5 units of time) 
rings. However, in 7 Z£ (in which each edge of the graph is infinitely often present) rings, since 
it is not possible to solve the original specification of the gathering problem, it solves a weaker 
version of the gathering problem in which all robots terminate their execution on the same node 
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Legend: 

G x Classes of dynamic graphs 

Any execution of A solves IP 

Any execution of A solves at least a problem weaker than IP 

Any execution of A solves IP more efficiently 
(for instance in terms of time complexity) 


Gracefully degrading algorithm A 


Speculative algorithm A 




Figure 12.1: Graceful degradation and speculation. 


of the graph in finite (but not necessarily bounded) time. Similarly, as mentioned previously, the 
specification of the gathering problem is not solvable in AC rings. Our algorithm solves the weak 
gathering problem in which all robots but (at most) one terminate their execution on the same 
node of the graph in finite and bounded time in AC rings. Moreover, the gathering problem is 
also impossible in COT (in which there exists infinitely often a path over time between any pair 
of nodes) rings, since AC C COT. Our algorithm solves the eventual weak gathering problem in 
which all robots but (at most) one terminate their execution on the same node of the graph in 
finite (but not necessarily bounded) time in COT rings (the weak gathering problem being also 
impossible to solve in COT rings). 

In Chapter 9 and in Chapter 10, we provided speculative algorithms for robot networks. We 
dealt with the perpetual exploration problem (in which all the nodes of the graph have to be 
visited infinitely often by at least one robot). In each of these chapters, we have characterized the 
necessary and sufficient number of robots needed to perpetually explore COT rings. In Chapter 9, 
this analysis has been performed on non-faulty robots while in Chapter 10 it has been done on 
self-stabilizing robots (robots subject to transient faults, i.e., arbitrary faults such that there 
exists a time from which these faults no longer exist). In both cases, we have proved that two 
robots are necessary and sufficient to solve the perpetual exploration problem in COT rings of size 
3; and that three robots are necessary and sufficient to solve the perpetual exploration problem 
in COT rings of size four or more. Our results for the sufficiency are constructive: we proposed 
algorithms to show the sufficiency. The algorithms provided while considering rings of size four or 
more (in the non-faulty case and in the self-stabilizing case) are speculative. They are speculative 
considering the cover time which is the worst time of the minimal time taken by the robots to 
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explore at least once each node of the ring from any time in all the possible executions of their 
algorithm. Indeed, they solve the perpetual exploration problem in COT rings in an unbounded 
cover time, and it is not possible to do better, and they solve this problem in an asymptotically 
optimal cover time in ST rings (i.e., @(n — 7Z). with n the size of the ring and 7Z the number of 
robots in the system, for the non-faulty case, and @(n) for the self-stabilizing case). 

Besides these results, we present, in Chapter A, a work solving the approach problem in the 
plane (i.e., two robots, endowed with a limited visibility range, have to be located, in finite time, 
in the range of vision of each other). Our algorithm uses asynchronous robots endowed with weak 
orientation capabilities. It solves the problem in a polynomial number of moves. 


12.2 Perspectives of the Thesis 

There exist multiple future work related to this thesis. We have already presented the per¬ 
spectives about our work on the graceful degradation in Chapter 7 and the perspectives about 
our work on the speculation in Section 11.2. In this section, we present more general perspectives. 

First of all, one may observe that we have only considered that robots may be subject to 
transient faults. Hence, we can study speculative and gracefully degrading approaches while 
using robots subject to other faults like Byzantine faults (which are arbitrary faults). Contrary 
to a transient fault, a Byzantine fault can occur at any time in the execution. Byzantine faults 
include transient faults and are therefore more difficult to handle. Handling Byzantine faults 
permit to have very robust algorithms, they tolerate any fault (i.e., they satisfy the specification 
of the problem considered whatever the faults). Generally, to deal with Byzantine faults the 
ratio between the number of non-faulty robots and Byzantine robots is important: to tolerate 
Byzantine faults, all the algorithms of the state of the art assume that at least the majority of the 
robots are non-faulty [33, 68, 25]. The first step to study Byzantine robots, in the context of this 
thesis, would be to characterize the necessary and sufficient number of non-faulty robots needed 
to solve problems while considering a gracefully degrading or speculative approach in dynamic 
graphs. 

Moreover, since it is possible for the edges of COT rings to be missing initially and this 
for an arbitrary long time, when considering the speculation, we proved that the cover time 
of any algorithm solving the perpetual exploration problem in COT rings is unbounded (refer 
to Section 8.3). If we had been interested in the complexity in terms of movements (i.e., the 
worst minimal number of edges traversed by the robots to visit each node of the ring in all 
the possible executions), the complexity would have been also unbounded. Indeed, the robots 
have to perpetually explore an unknown dynamic ring, hence if there exists during a while two 
distinct connected components of this ring, with all the robots only in one of these connected 
components, the robots will explore it infinitely often, making increase the number of movements 
of the robots without exploring at least once each of the nodes of the ring. Indeed, the robots 
have no knowledge about the graph, therefore they will explore infinitely often the nodes of 
the connected component in which they are located, without succeeding to solve the perpetual 
exploration of the whole ring. Hence, these unbounded complexities are due to the dynamics of 
the environment, not to the algorithms (that are forced by the dynamics to act the way they act). 
It is not fair to compare complexities in ST graphs and in COT graphs. Indeed, a robot in a 
static graph that wants to cross an edge is always able to do so, whereas a robot in a dynamic 
graph that wants to cross an edge is not always able to do so since this edge could be missing. In 
this last case, the robot could either wait for the missing edge to appear (making then the time 
complexity increase) or find another path to reach its destination (making the time complexity 
as well as the complexity in terms of movements increase). Hence, it is important to introduce 
a new notion of time complexity and a new notion of complexity in terms of movements for 
dynamic graphs. This work would permit to compare the efficiency of algorithms for dynamic 
graphs (whatever the dynamics considered), like it has been done in the message passing model to 
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compare synchronous and asynchronous algorithms in introducing the notion of rounds [8]. Note 
that this notion of rounds, even if introduced for the message passing model, is also suitable to 
compare synchronous and asynchronous algorithms using robots. Dubois et al. [78] already tried 
to define a new notion of time complexity for dynamic graphs adapted for the message passing 
model. In their definition, the time unit (i.e., the notion of round) of an execution is the longest 
time between the sending of a message through a non-eventual missing edge and its reception. 
However, contrary to messages, robots cannot be duplicated or broadcast, and they sometimes 
must change direction while stuck on a missing edge. The notion of time complexity of Dubois et 
al. would count the time wasted by the robots while changing direction, but, we do not want to 
take it into account. Hence, even if this time complexity could be suitable for the message passing 
model it is not suitable for robot networks. Therefore, a challenging future work is to define a 
time complexity suitable for any dynamic distributed system; and define a complexity in terms 
of movements suitable for robots evolving in dynamic graphs. 

Once these complexities defined, it would be worth it to analyze again our algorithms, and 
see if they are still speculative. 

Besides, we have analyzed speculative and gracefully degrading aspects separately. At first 
sight, it is not possible to combine the two notions since a gracefully degrading algorithm con¬ 
siders a problem impossible in some environments, and since a speculative algorithm considers 
a problem solvable in any execution in which it is susceptible to be executed. However, it could 
be interesting to consider the speculative aspect of gracefully degrading algorithms: for each set 
of classes in which a gracefully degrading algorithm solves a problem Vi. optimize this problem 
for the class, among this set, that is the most frequent. Of course, this implies that the problem 
Vi should be solvable in multiple classes of dynamic graphs to analyze the speculative aspect of 
the gracefully degrading algorithm on this set of classes. For instance, in our study, our grace¬ 
fully degrading gathering algorithm solves the specification of the gathering problem in B1ZS and 
ST rings, therefore, it is possible to study the speculative aspect of this algorithm for these two 
classes. Similarly, if our algorithm had solved the eventual gathering problem in another class of 
dynamic graphs than TZS graphs, it would have been possible to study the speculative aspect of 
our algorithm for these two classes. 
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Rendezvous in an Infinite Grid 
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In this chapter, we present another problem that we studied, but that is not entirely in the 
scope of this thesis. The problem studied is the deterministic approach in the plane. The ap¬ 
proach problem consists for two robots evolving in the plane, endowed with a limited visibility 
range, to be located, in finite time, in the range of vision of each other. Generally, while consid¬ 
ering the approach problem, each robot is able to see its environment in a range of vision equals 
to one unit of length. 

We provide a deterministic algorithm that uses asynchronous robots and that solves the ap¬ 
proach problem in a number of movements polynomial in the initial distance separating the two 
robots and in the size of the binary representation of the smallest identifier. This work has been 
published in DISC 2017 [22], in Distributed Computing [24] and in ALGOTEL 2018 [23]. 

Before presenting succinctly our work, we first present a brief overview of the state of the art 
about this subject. 

A.l State of the Art about the Approach in the Plane 

As indicated in Section 3.1.4, the approach in the plane problem can be reduced to the ren¬ 
dezvous problem in an infinite grid (i.e., two initially scattered robots have to be located, in finite 
time, on the same node of the infinite grid or on the same point of an edge of the grid) [51, 67]. 

Indeed, consider an infinite square grid with edge length 1. More precisely, for any point v in 
the plane, we define the grid G v as the infinite graph such that v is a node of G v . Every node u 
of G v is adjacent to 4 nodes at Euclidean distance 1 from it, and located north, east, south, and 
west from node u. We now focus on how to transform any rendezvous algorithm in the grid G v to 
an algorithm for the task of approach in the plane (refer to Figure A.l for an illustration of the 
explanation given below). 

Let A be any rendezvous algorithm for any basic infinite grid. Algorithm A can be executed 
in the grid G v , for any point v in the plane. Consider two robots in the plane starting respectively 
from point v and point w (of the plane). Let V be the set of nodes in G v that are the closest 
nodes from w. Let v' be a node in V', arbitrarily chosen. Note that v' is at distance at most 
i/2/2 < 1 from w. Let a be the vector v'w. Execute Algorithm A on the grid G v with the 
two robots starting respectively at nodes v and v'. Let p be the point in G v at which the two 
robots meet at some time t. Note that p is either a node or a point inside an edge of G v . The 
transformed algorithm A* solving the approach in the plane works as follows: execute the same 
algorithm A but with one robot starting at v and traveling in G v and the other robot starting 
at w and traveling in G w , so that the starting time of the robot starting at w is the same as the 
starting time of the robot starting at v' in the execution of A in G v . The starting time of the 
robot starting at v does not change. If the approach has not been accomplished before, at time 
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t, the robot starting at v and traveling in G v is at point p (as this was the case while executing 
A). In the same way, the robot starting at w and traveling in G w reaches some point q at time 
t such that q = p + a. Hence, at time t, the two robots are at distance less than one from each 
other, which means that they accomplish the approach in the plane (since the range of vision of 
each robot is equal to one unit of length). 

Legend : 
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Figure A.l: Transformation of any rendezvous algorithm in the grid G v to an algorithm for the 
task of approach in the plane. 

The cost (in terms of the number of movements executed by each robot) of the rendezvous 
algorithm A is either greater than or equal to the cost of the algorithm solving the approach 
problem in the plane thanks to A *. 

Our goal is to study the approach problem in a harsh setting. More precisely, we want to focus 
on the deterministic approach problem executed by asynchronous robots endowed with very few 
capacities. On this purpose, we present here the four articles the more related to our work. All 
the work presented below consider the deterministic approach problem and study the rendezvous 
problem in an infinite grid to solve it. Note that each of these articles uses robots having access 
to distinct information like distinct identifiers. This is mandatory to solve the deterministic 
approach problem; otherwise the robots could execute the same actions at the same instant time 
and hence be separated from the same distance at each instant from time t = 0, making the 
deterministic approach problem impossible. 

Czyzowicz et al. [51] consider robots that evolve in any (finite or infinite) anonymous graph. 
The robots they consider are asynchronous. Each robot possesses a distinct positive integer as 
identifier. The robots know only their own identifier. They have persistent memory, and no 
restriction is made on the memory of the robots. They do not know any information on the graph 
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nor on the initial distance separating them. Even if their algorithm solves the rendezvous problem 
in a strong model (asynchronisnr of the robots, no knowledge of a common global coordinate 
system for the robots), its cost (in terms of the number of edge traversals) to solve the problem is 
exponential in the size of the graph. 

Collins et al. [47] provide an algorithm that solves the rendezvous problem in an infinite grid 
with a number of edge traversals polynomial in the initial distance separating the two robots. 
More precisely, the complexity of their algorithm is in 0(d 2+e ) for any constant e > 0, where d 
is the initial distance between the robots. The robots they study are asynchronous. However, 
the robots are assumed to have access to a common global coordinate system. Each robot knows 
its initial position (i.e., its coordinates in this coordinate system) on the grid, but does not know 
the initial position of the other robot. Therefore, even if the complexity of their algorithm is 
interesting (since the lower bound on the number of edge traversals to solve the rendezvous 
problem is in H(d 2 )), the model they consider is unfortunately a weak one. 

With the exact same assumptions on robots than those made by Collins et al. [47], Banrpas 
et al. [13], present an algorithm where the robots evolve in multidimensional infinite grids. Their 
algorithm achieves the rendezvous in a number of edge traversals in 0(d s *log(d) e ) for some e > 0, 
with 5 the dimension of the grid and where d is the initial distance separating the two robots. 
Therefore, their algorithm has a better complexity than the one proposed by Collins et al. [47]. 
In order to suppress the knowledge about the initial position on the common global coordinate 
system, in the same article, the authors propose a method to label the ports of the nodes. This 
labeling of the ports permits the robots to extract the label of the node where they are located 
and permits them to have enough information to solve the rendezvous problem using the same 
algorithm as the one performed when they are aware of their initial position. 

The work that is the most related to ours is the one of Dieudonne and Pelc [67]. In this ar¬ 
ticle, the authors consider robots evolving in an infinite grid. They possess distinct identifiers, 
a compass (but they do not have access to a common global coordinate system), and the same 
unit of length. Their algorithm solves the rendezvous problem with a number of edge traversals 
polynomial in the initial distance separating the two robots and in the size of the binary rep¬ 
resentation of the smallest identifier. However, the robots are not fully asynchronous. Indeed, 
they may possess distinct speeds, but all along the execution of the algorithm, a robot possesses 
always the same speed (i.e., the speed cannot evolve with time). Moreover, even if a robot does 
not know the speed of the other robot, it is aware of its speed. 


A.2 Our Approach in the Plane 

The asynchronous model is the more realistic model. As shown in the previous section, none 
of the articles of the state of the art solve the approach in the plane problem in a number of 
edge traversals polynomial while robots are asynchronous, or if they do so this is at the price of 
important assumptions (such as robots possess the same coordinate system [47, 13], or the ports 
of the nodes are labeled such that the nodes of the infinite grid are identified [13], or the robots 
are not moving in a fully asynchronous manner [67]). 

We therefore decide to fill the lack of the state of the art by providing a solution to the 
approach in the plane problem at polynomial cost (in terms of the number of edge traversals) 
while considering fully asynchronous robots endowed with very few capacities. 

More precisely we made the following assumptions on the robots. The asynchronous robots 
are endowed with compasses (i.e., robots agree on the direction and orientation of the two car¬ 
dinal axes). Robots also agree on a same unit of length. However, they do not have a common 
coordinate system, in particular, they do not know an origin point of the coordinate system. The 
robots have identifiers, but each robot knows only its own identifier. The robots possess the same 
range of vision. The two robots are initially scattered, and do not know the initial distance that 
separates them. Moreover, the robots do not start necessarily the execution of their algorithm at 
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the same time. They are indeed woken at arbitrary time. 

We describe in the following the intuition of our algorithm solving the approach problem. Like 
the other algorithms of the state of the art, we study the rendezvous in an infinite grid in order 
to solve the approach problem. The grid we consider is anonymous, i.e., there is no identifier on 
the nodes. 

Once woken, each robot r first modifies its identifier id r : each bit of the binary representation 
of the identifier is duplicated and the bits “01” are added at the end of the sequence of these dupli¬ 
cated bits. More formally, the binary representation of id r . denoted bib -2 ■■ ■ &|jrf r |, is transformed 
in b\bib 2 b -2 ... &|jd r |fe|id r |01. Call transf ormedldenti f ier r the transformed identifier of the robot 
r, and let trans f ormedl denti fier[i], for any 1 < i < \transformedldenti fier r \, be its i th bit. 

The two robots r\ and r 2 possess distinct identifiers. Therefore, there exists a position i (with 
1 < i < min{\transformedldentifier ri \, \transf ormedl denti fier V2 \}) such that trans f ormed- 
Identifier ri [i\ trans f ormedl denti fier r2 [i]. 

The goal of the rendezvous algorithm is for the two robots to meet on a node or an edge of the 
infinite grid. To do so, the two robots read the bits of their transformed identifier and execute 
some patterns depending on the values of these bits. More precisely, when a robot reads a bit 
equal to zero, it executes a certain pattern Vo starting on its initial node. The pattern Vq ends on 
the node where the robot started performing this pattern. When a robot reads a bit equal to one, 
it performs a pattern V\ starting on its initial node, such that V\ corresponds to the execution of 
the pattern Vo on each node at a certain distance d from its current node. Like the pattern Vo, V\ 
ends on the node where it was initiated. The pattern V\ encompasses the pattern Vq . Therefore, 
if r'i executes the pattern Vo (of V\) initiated on the initial node of the robot r 2 (note that this 
means that r\ considers a distance d greater than or equal to the initial distance between r\ and 
r 2 ) while r 2 executes Vq, the rendezvous will occur. However, as the pattern V\ corresponds to 
multiple patterns Vo , it is possible that r 2 finishes to execute its pattern Vo before the robot ri is 
able to execute the pattern Vo (of V\) initiated on the initial node of ?’ 2 - This is why we introduce 
a circular shift: each bit of the transformed identifier is processed s times, where s corresponds 
to the number of nodes at distance d from the initial node of the robot. For each new value of s 
the first pattern Vo of Vi is initiated on a new node among the s possible one. 

As indicated, the rendezvous occurs if the distance d considered is greater than or equal to the 
initial distance between the two robots. However, the two robots do not know the initial distance 
that separates them. To circumvent this problem, the robots make assumptions on this distance. 
First, the two robots assume that the initial distance separating them corresponds to one unit 
of length. For each distance assumed, the robots execute the rendezvous algorithm, and if the 
rendezvous has not occurred with the current assumption, they make a new assumption: they 
assume that the initial distance separating them corresponds to twice the previous one. 

For each distance d assumed, the robots read d bits of their transformed identifier. In the case 
where the length of the transformed identifier of a robot r is smaller than d , once the robot has 
read its full transformed identifier, we assume that it reads only bits equal to zero. 

For the rendezvous to occur, we want the two robots to perform simultaneously two distinct 
bits at the same position of their transformed identifiers and with the same assumption on d. 

Thus, despite the fact that the robots are asynchronous, we want them to be synchronized in 
their execution. To do so, two kinds of synchronization mechanisms are used: a synchronization 
on the distance (i.e., the two robots make the same assumption on the distance at the same time) 
and a synchronization on the bits read (i.e., for all i, with 1 < i < min{\transformedIden- 
tifier ri \,\transformedIdentifier r2 \}, the two robots must read the i th bit of their respective 
transformed identifiers at the same time). 

The goal of these synchronization mechanisms is to make the slower robot catch up its delay 
compared to the other robot. A robot that executes these synchronization mechanisms performs 
patterns that force the other robot to increase its speed; otherwise the rendezvous occurs. Each 
time a robot finishes to read a bit, or each time it wants to make a new assumption on the 
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distance, it executes one of these synchronization mechanisms. 

To sum up, thanks to these synchronization mechanisms, we know that there exists a time 
at which the two robots perform simultaneously two distinct bits (since there exists an integer i, 
1 < i < min{\transformedIdentifier ri \, \transformedIdentifier r2 \}, such that transformed- 
Identifier ri [i\ / transformedIdentifier r2 [i\ ) while considering a distance d greater than or 
equal to the initial distance that separates them. Therefore, at this time, the rendezvous occurs. 
Hence, our algorithm succeeds to solve the approach in the plane problem using asynchronous 
robots possessing few capacities. Moreover, the patterns are carefully chosen in order that the 
number of edge traversals is polynomial. More precisely, our algorithm solves the approach prob¬ 
lem in a number of edge traversals polynomial in the initial distance between the two robots and 
in the size of the binary representation of the smallest identifier. 
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Dans cette these, nous etudions des systemes composes de plusieurs processus capables de 
communiquer ensemble. De tels systemes sont dits distribues. Chaque processus d’un systeme 
distribue execute un algorithme (local) (i.e., une sequence ordonnee d’instructions) d’une maniere 
non coordonnee, i.e., sans l’aide d’aucune entite centrale. Un algorithme distribue est l’ensemble 
de tous les algorithmes locaux des entites d’un systeme distribue. 

Les systemes distribues sont a opposer aux systemes centralises dans lesquels une seule entite 
a une vue globale du systeme et prend toutes les decisions. Dans les systemes distribues, tous les 
processus prennent leurs propres decisions en fonction de leurs propres connaissances du systeme. 
Ils ont leur propre horloge et leur propre vitesse de calcul. Afin de resoudre des problenres, les 
processus doivent cooperer tous ensemble bien qu’ils n’aient ni la nrerne perception du temps, ni 
la nrerne vision du systeme... 

Menre si leur conception peut etre delicate a divers egards, en particulier la synchronisation 
des algorithmes locaux, les systemes distribues presentent certains avantages. En effet, les pro¬ 
cessus peuvent s’executer en parallele, ce qui rend les executions de taches plus rapides que si elles 
etaient effectuees par un seul processus. De plus, puisqu’il y a plusieurs processus pour executer 
une tache, il est possible de tolerer des fautes: si l’un des processus arrete d’executer correctenrent 
son algorithme il peut encore etre possible de resoudre le problenre. 

Un systeme distribue est un nrodele general qui pernret de representer differents types de 
systemes reels tels que les reseaux telephoniques, les reseaux de transport, Internet... Il existe 
plusieurs hypotheses qui peuvent etre faites sur un systeme distribue pour representer tous ces 
divers systemes reels : les entites sont-elles synchrones (leur vitesse de calcul est bornee) ou sont- 
elles asynchrones (leur vitesse de calcul est hnie mais non bornee) ? Les entites sont-elles capables 
de communiquer ? Comment communiquent-elles (grace a une memoire partagee ou a des envois 
de messages) ? Les entites sont-elles capables de communiquer de maniere synchrone (le temps 
d’acheminement des messages est borne) ou asynchrone (le temps d’acheminement des messages 
est hni mais non borne)? Les entites peuvent-elles etre sujettes a des fautes ? Est-ce que le graphe 
de communication des entites est represente par un graphe statique ou par un graphe dynamique 
(ou les aretes nrodelisent la possibilite pour deux entites de communiquer, et peuvent apparaitre 
et disparaitre avec le temps) ? 

Un environnement correspond a l’ensemble des hypotheses faites sur un systeme distribue. 
Certains environnements sont plus difficiles que d’autres : par exemple un environnement com¬ 
pose d’entites asynchrones est plus difficile que le nrerne environnement ou les entites sont syn¬ 
chrones. Quand un environnement est trop dur, certains problenres deviennent impossibles a 
resoudre ou les bornes inferieures (i.e., la performance nrininrale selon certaines nretriques conrnre 
le temps utilise, la nrenroire utilisee, le nonrbre de messages envoyes, etc., necessaire pour resoudre 
un problenre) pour resoudre certains problenres augnrentent. Par exenrple, le problenre du con¬ 
sensus (ou les processus doivent decider de maniere irrevocable, en temps hni, la nrerne valeur 
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parmi un ensemble de valeurs initialement proposees par chacun des processus) est impossible 
lorsque les processus sont asynchrones et peuvent arreter l’execution de leur algorithme [82]. 

L’approche classique, lors de l’etude d’algorithmes distribues, consiste a analyser la faisabil- 
ite des problemes, i.e., determiner les environnements dans lesquels les problemes etudies sont 
resolubles et ceux dans lesquels ils sont impossibles a resoudre. Une fois que ces environnements 
ont ete determines, l’approche classique consiste a trouver au rnoins un algorithme par envi- 
ronnement ou les problemes peuvent etre resolus et de preference avec de bonnes performances 
(comrne une bonne complexity temps). Un algorithme congu pour un environnement particulier 
ne garantit ni un comportement correct ni de bonnes performances lorsqu’il est execute dans 
un autre environnement. Cette approche peut etre restrictive, par exemple dans un contexte ou 
nous ne pouvons pas savoir a l’avance l’environnement dans lequel l’algorithme sera reellement 
execute. Ceci est particulierement vrai lorsque l’algorithme est execute dans un environnement 
qui peut changer avec le temps, comme par exemple un environnement ou les processus peuvent 
etre synchrones a un moment donne et asynchrones a un autre moment ou un environnement 
qui est plus ou rnoins dynamique (i.e., la frequence d’apparition et de disparition des aretes du 
graphe de communication des processus est plus ou rnoins elevee) en fonction du temps. 

Dans cette these, nous adoptons une approche alternative en etudiant des algorithmes qui 
s’auto-adaptent a l’environnement dans lequel ils sont executes. Nous nous concentrons sur deux 
de ces approches: Vindulgence / la degradation progressive et la speculation que nous decrivons 
ci-dessous. 


Algorithmes indulgents/progressivement degradants. Les algorithmes indulgents [5, 118, 
131] et les algorithmes progressivement degradants [20] (que nous definissons par la suite) sont 
bases sur le rnerne principe mais appliques a differents environnements : les algorithmes in¬ 
dulgents se concentrent sur des environnements ou seule la synchronicite change, alors que les 
algorithmes progressivement degradants se concentrent sur des environnements ou seule la dy- 
namicite du systeme change. Lorsque de tels algorithmes sont executes dans un environnement 
ou le probleme etudie est impossible, ils ne peuvent evidemment pas resoudre le probleme, mais 
ils garantissent de faire de leur rnieux. En effet, ils garantissent que tant que les conditions du 
systeme ne conviennent pas pour resoudre le probleme, ils resolveront une version degradee de ce 
dernier. 

Par exemple, Biely et al. [20] ont presente un algorithme progressivement degradant qui re- 
sout le probleme du consensus dans les systemes ou les hypotheses de connectivity du graphe de 
communication sont fortes (les aretes sont frequemment presentes), et qui se degradent progres¬ 
sivement en k-accord (ou les processus doivent decider irrevocablenient, en temps fini, k valeurs 
parmi un ensemble de valeurs initialement proposees par chacun des processus) lorsque la connec¬ 
tivite entre les processus communiquants diminue et rend le probleme du consensus impossible. 

Plus precisement, les algorithmes indulgents / progressivement degradants resolvent le prob¬ 
leme V etudie quand ils sont executes dans certains environnements ou ce probleme est resoluble 
et resolvent des problemes plus faibles que V dans les autres cas. En calcul distribue, les defini¬ 
tions des problemes sont generalement decomposees en une propriete de surete et une propriete 
de vivacite. Intuitivement, selon Lamport [117] “une propriete de surete est une propriete qui dit 
que quelque chose ne va pas arriver” et “une propriete de vivacite est une propriete qui stipule 
que quelque chose doit se produire”. Les problemes plus faibles que V, resolus par un algorithme 
indulgent / progressivement degradant, peuvent conserver la surete de V pour preserver l’essence 
de ce probleme. 

Ces approches sont un rnoyen de contourner les resultats d’impossibilite qui se produisent 
dans certains environnements car les algorithmes indulgents / progressivement degradants four- 
nissent une solution de type “au rnieux” quand ils sont executes dans un environnement ou le 
probleme est impossible. De tels algorithmes sont egalement utiles lorsque l’environnement dans 
lequel ils sont executes n’est pas connu a l’avance, ou lorsque l’environnement peut evoluer avec 
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le temps car ils s’adapteront a ces changements sans aucune intervention externe en fournissant 
les meilleures proprietes possibles dans chaque environnement. 

Algorithmes speculatifs. En informatique distribute, l’approche classique pour evaluer l’effi- 
cacite d’un algorithme est de considerer le cas le plus defavorable afin de fournir une borne 
superieure (i.e., la performance maximale selon certaines metriques comrne le temps utilise, la 
memoire utilisee, le nornbre de messages envoyes, etc., necessaire pour resoudre un probleme) 
pour n’importe quelle execution possible dans un environnement donne. L’approche speculative 
[114, 77, 9] se fonde sur l’observation que le pire environnement possible dans lequel un prob¬ 
leme peut etre resolu n’est pas toujours le plus frequent. Lorsque l’environnement dans lequel les 
algorithmes sont le plus souvent executes ne correspond pas au cas le plus defavorable possible, 
l’approche classique (considerant le cas le plus defavorable) peut fournir des bornes superieures 
qui sont tres eloignees des bornes obtenues en “pratique”. Pour pallier ce probleme, l’approche 
speculative consiste a optimiser les algorithmes pour l’environnement le plus frequent dans lequel 
ils seront executes. L’analyse de l’efhcacite d’un algorithme speculatif se fait toujours par rapport 
au cas le plus defavorable de maniere a fournir une borne superieure pour toute execution dans 
l’environnement le plus probable. 

Plus precisement, les algorithmes speculatifs resolvent le probleme etudie dans tous les envi- 
ronnements dans lesquels ils sont susceptibles d’etre executes, rnais aussi ils sont plus efficaces 
lorsqu’ils sont executes dans les environnements les plus probables en pratique. L’optimisation 
fournie par un algorithme speculatif est, selon le contexte, fonction d’une complexity temps, me¬ 
moire, en nornbre de messages echanges... 

Cette approche perrnet de contourner d’importantes bornes inferieures obtenues dans certains 
environnements rares puisque les algorithmes speculatifs fournissent une solution optimisee au 
probleme etudie lorsqu’ils sont executes dans des environnements dans lesquels le probleme est 
frequemment execute (i.e., la borne superieure obtenue dans les environnements les plus frequents 
est inferieure a la borne inferieure obtenue en considerant toutes les executions possibles). 

Reseaux de robots dans des environnements dynamiques. Dans cette these, nous nous 
interessons aux reseaux de robots [136], i.e., reseaux constitues de processus capables de bouger 
et dotes de capteurs pour detecter leur environnement. Nous considerons une cohorte de robots 
avec peu de capacites. De nombreuses applications existent pour de tels systemes multi-robots: 
encerclement, patrouille, exploration de divers environnements... Les capacites de deplacement 
et sensorielles sont des ingredients cles pour realiser des taches collaboratives dans de tels sys¬ 
temes distribues. Dans cette these, nous considerons des systemes distribues avec des hypotheses 
et des capacites de robot aussi faibles que possible et nous determinons la faisabilite de problemes 
dans des modeles donnes. 

Une premiere approche "naturelle" lors de l’etude des reseaux de robots consiste a considerer 
des robots evoluant dans l’espace continu [45, 72, 139, 123]. Une seconde approche consiste 
a considerer des robots evoluant dans des environnements discrets modelises par des graphes 
statiques oil les nceuds representent les emplacements ou les robots peut etre situes et les aretes 
representent la possibility pour un robot de bouger d’un emplacement a un autre [85, 17, 64, 69]. 

Cependant, tous les environnements ne sont pas statiques : certains sont dynamiques et peu- 
vent etre representes par des graphes dynamiques dans lesquels les nceuds et les aretes peuvent 
apparaitre et disparaitre avec le temps. Les graphes dynamiques sont utiles pour representer des 
environnements instables susceptibles de changer au hi du temps, comrne par exemple un reseau 
de transport, un batiment dans lequel les portes sont fermees et ouvertes au cours du temps, ou 
des rues qui sont fermees au cours du temps en raison de travaux en cours ou d’embouteillage 
dans une ville. 

Dans cette these, nous considerons des robots evoluant dans des graphes dynamiques com¬ 
poses d’un ensemble de nceuds statiques qui modelisent les emplacements ou les robots peuvent 
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etre situes, et d’un ensemble d’aretes qui peuvent apparaitre et disparaitre avec le temps et 
represented la possibilite pour un robot de se deplacer d’un emplacement a un autre a un mo¬ 
ment donne. 

II existe plusieurs systemes niodelisables grace aux graphes dynanriques, tous ces systenies 
n’ont pas la nienie connectivite dans le temps (i.e., frequences d’apparition et de disparition des 
aretes). Par exemple, les reseaux de transport en commun ont une connectivite periodique induite 
par les mouvements des transporteurs tandis que les reseaux telephoniques ont une connectivite 
incontrolee. Par consequent, pour representer les differentes hypotheses de connectivite, il existe 
differentes classes de graphes dynanriques [40, 38]. 

Lorsque la vitesse et la planification des modifications topologiques varient, certains prob- 
lenies deviennent impossibles ou les bornes inferieures pour resoudre certains problenres aug- 
mentent. Cela motive l’utilisation des approches progressivement degradantes et speculatives. 

Problematiques de la these. Comnre les approches progressivement degradantes et specula¬ 
tives n’ont jamais ete appliquees aux reseaux de robots, l’objectif poursuivi dans cette these est 
de determiner si cela est faisable et si cela en vaut la peine. 

Au premier abord, les fortes restrictions de ce niodele original ne plaident pas en faveur d’une 
reponse positive. En particulier, dans un systeme distribue traditionnel, les processus echangent 
des informations en envoyant des messages (qui peuvent etre dupliques pour surmonter les ab¬ 
sences temporaires ou permanentes des aretes sans aucun impact sur le comportement en cours 
des processus), alors que les robots doivent se deplacer pour communiquer (directement ou non) 
ensemble (sans la possibilite de se dupliquer, ce qui les oblige a gerer leurs mouvements en fonc- 
tion de la dynamique de l’environnement). Par consequent, concevoir un algorithme pour un 
reseau de robots capables de s’adapter a plusieurs environnements senible etre une tache ardue. 

La contribution de cette these est de relever ce defi et de fournir une reponse positive a cette 
question en mettant l’accent sur deux problenres classiques de la litterature: le rasseniblenient 
(ou tous les robots doivent etre situes, en temps fini et borne, sur le nienie noeud du graphe) et 
l’exploration perpetuelle (ou tous les noeuds du graphe doivent etre visites infininient souvent par 
au nioins un robot). 

Contributions de la these. Nous niontrons tout d’abord Section B.2 qu’il est possible d’appli- 
quer une approche progressivement degradante aux reseaux de robots. Pour cela nous etudions 
le problenie du rasseniblenient dans des anneaux dynanriques. Ce problenie est impossible a re¬ 
soudre dans des anneaux tres dynanriques (anneaux dynanriques dans lesquels au plus une arete 
peut etre nranquante pour toujours a partir d’un certain temps). Ainsi ce problenie est un bon 
cas d’etude pour une approche progressivement degradante. Les resultats presentes dans cette 
section ont fait l’objet d’une publication dans International Symposium on Stabilization, Safety, 
and Security of Distributed Systems 2018 [31]. 

Nous niontrons ensuite, Section B.3, qu’il est possible d’appliquer une approche speculative 
aux reseaux de robots. Pour cela nous etudions l’exploration perpetuelle dans des anneaux dy- 
nanriques. Nous considerons ce problenie en utilisant des robots non sujets aux fautes ainsi qu’en 
presence de fautes transitoires (fautes arbitraires qui ne sont plus presentes a partir d’un certain 
temps). Les resultats obtenus en considerant des robots sans faute ont ete publies dans IEEE 
International Conference on Distributed Computing Systems 2017 [29], et dans rencontres fran¬ 
cophones sur les Aspects Algorithmiques des Telecommunications 2017 [30]. Ceux obtenus en 
considerant des robots sujets aux fautes transitoires ont ete publies dans International Sympo¬ 
sium on Stabilization, Safety, and Security of Distributed Systems 2016 [27], et dans Theoretical 
Computer Science [28]. 

Nous nous sonimes egalenient interesses au problenie de l’approche dans le plan (qui consiste 
pour deux robots, dotes d’une vision liniitee, a etre localises, en temps fini, dans le champ de 
vision l’un de l’autre). Nous avons fourni un algoirthnie en temps polynomial (en ternies de 
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mouvements) qui resout ce probleme en utilisant des robots asynchrones dotes de faibles capacites 
pour s’orienter dans le plan. Ce travail a ete publie dans International Symposium on Distributed 
Computing 2017 [22], dans Distributed Computing [24], et dans rencontres francophones sur les 
Aspects Algorithmiques des Telecommunications 2018 [23]. L’algorithme presente dans ces articles 
n’etant ni progressivenrent degradant ni speculatif, nous ne le detaillerons pas ici. 


B.l Contexte 

Nous considerons un ensemble de robots autononres se deplaqant dans un environnenrent dis- 
cret, anonyme, bidirectionnel et dynamique. Par environnenrent discret, anonyme et bidirection- 
nel, nous designons un espace partitionne en un nornbre fini d’emplacements (discret) represente 
par un graphe ou chaque nceud est indistinguable des autres nceuds (anonyme) et represente un 
emplacement susceptible d’etre occupe par un ou plusieurs robots et ou une arete represente la 
possibility pour un robot de se deplacer (dans les deux directions) d’un emplacement a un autre 
(bidirectionnel). De plus, ce graphe est dynamique dans le sens ou ses aretes peuvent apparaitre 
et disparaitre au cours du temps. Pour modeliser cela, nous considerons le temps comme discret 
et definissons un graphe evolutif (selon [80]) comme une suite de graphes statiques construits sur 
un ensemble constant de nceuds. Chaque graphe de cette suite contient les aretes presentes dans 
l’environnement des robots a l’instant associe. Dans un graphe evolutif, les aretes peuvent se 
repartir en deux categories : les aretes nranquantes a ternre et les aretes recurrentes. Les pre¬ 
mieres sont des aretes qui disparaissent definitivenrent apres un instant donne; les secondes sont 
infininrent souvent presentes dans la suite de graphes. 

II existe plusieurs types de graphes dynamiques. Nous presentons ici ceux que nous consid¬ 
erons dans la these. Par abus de langage, nous dirons qu’un graphe evolutif est “X” si ce graphe 
appartient au type X de graphes dynamiques. Un graphe evolutif est dit statique (note ST) si 
toutes ses aretes sont presentes a chaque instant. Un graphe evolutif est recurrent borne (note 
BUS) si chacune de ses aretes est presente au nroins une fois toutes les 5 unites de temps. Un 
graphe evolutif est recurrent (note IZ£) si chacune de ses aretes est presente infininrent souvent. 
Un graphe evolutif est dit toujours connecte (note AC) si a chaque instant, les aretes presentes 
forment un graphe connexe. Enfin un graphe evolutif est connecte dans le temps (note COT) si 
ses aretes peuvent apparaitre et disparaitre de nraniere inrprevisible sans aucune hypothese de 
recurrence, de stability ou de periodicity a travers le temps, a la condition que les aretes recur- 
rentes induisent un graphe couvrant connexe. Cette condition pernret a un robot d’atteindre tout 
nceud du graphe quel que soit son nceud et sa date de depart. Notons qu’il existe des relations 
d’inclusion entre ces differents types de graphes dynamiques : ST C BUS C TZ£ C COT et 
ST c AC c COT. 

Chaque robot est dote d’une unite de calcul, d’un nrecanisme lui pernrettant de se deplacer 
d’un nceud a un autre et de capteurs capables de determiner la presence des aretes adjacentes au 
nceud sur lequel le robot se trouve. Les capteurs donnent des informations aux robots, comme 
par exenrple, la multiplicity faible (c’est-a-dire de savoir si le robot est seul a occuper le nceud 
ou non) ou forte (c’est-a-dire de connaitre le nornbre exact de robots se trouvant sur le nceud du 
robot courant) du nceud. Si plusieurs robots occupent un nrenre nceud au nrenre instant, nous 
dirons qu’ils forment une tour. Les robots sont dotes d’une nremoire persistante et evoluent dans 
un graphe dynamique de nraniere synchrone en effectuant chacun un cycle atonrique a chaque 
instant. Ce cycle conrporte trois phases. La premiere est la phase d’observation. Elle consiste a 
capter et transnrettre ces informations (presence des aretes adjacentes, la multiplicity du nceud, 
etc.) a l’unite de calcul du robot. Elle est suivie d’une phase de calcul au cours de laquelle, 
sur la base des observations recueillies, l’unite de calcul execute un algorithnre qui etablit la 
direction (un numero de port d’une arete) a prendre lors de la phase de deplacenrent, c’est-a-dire 
1’arete adjacente que doit essayer de traverser (de nraniere atonrique) le robot. Si 1’arete n’est pas 
presente a cet instant, le robot reste sur son nceud. 
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B.2 Approche progressivement degradante 

II n’existe pas d’algorithme progressivement degradant utilisant des robots. Le probleme du 
rassemblenrent etant impossible a resoudre dans certains types de graphes dynanriques, nous 
avons choisi de nous interesser a ce probleme dans les graphes dynanriques et de lui trouver une 
solution progressivement degradante lorsque la dynanricite du graphe augnrente. 

Etat de Part. II existe dans la litterature des algorithmes resolvant le rassemblenrent dans 
les graphes dynanriques (nrais conrnre indique, ils ne sont pas progressivement degradants). No- 
tanrnrent, ces algorithmes ne considerent qu’un seul environnenrent nrodelise par un seul type de 
graphes dynanriques. Parnri ces algorithmes, celui de Yanrauchi et al. [142] resout le probleme du 
rendez-vous (rassemblenrent de deux robots) dans des anneaux dynanriques ou a chaque instant 
de temps la presence de chaque arete est decide avec une certaine probability. Izunri et al. [110] 
eux s’interessent au probleme du rassemblenrent dans des anneaux 1Z£. Di Luna et al. [122] 
se sont interesses au probleme du rassemblenrent dans des anneaux AC. Ils ont prouve que ce 
probleme est impossible a resoudre dans ce type d’anneaux dynanriques et ont alors donne un 
algorithnre resolvant le rassemblenrent approche avec ternrinaison (ou tous les robots doivent, en 
temps fini et borne, terminer leur execution sur deux nceuds adjacents de l’anneau dyanrique) 
dans des anneaux AC. Ooshita et Datta [128] se sont interesses aux anneaux COT. Le resultat 
d’inrpossibilite de Di Luna et al. [122] est egalenrent valide pour les anneaux COT. Ooshita 
et Datta [128] ont fourni un algorithnre resolvant le rassemblenrent approche sans ternrinaison 
(ou tous les robots doivent, en temps fini, se retrouver sur deux nceuds adjacents de l’anneau 
dynanrique sans necessairenrent terminer leur execution) dans des anneaux COT. 

Nos resultats. L’impossibility enoncee par Di Luna et al. [122] a motive la conception de 
notre algorithnre progressivement degradant resolvant le rassemblenrent dans des anneaux dy¬ 
nanriques. C’est le premier algorithnre progressivement degradant applique aux reseaux de 
robots. L’algorithnre que nous avons conqu resout le rassemblenrent dans les graphes dynanriques 
ou ce probleme est resoluble, et le degrade (resout des versions plus faibles) lorsqu’il est execute 
dans des graphes dynanriques ou ce probleme est impossible. Nous avons un seul algorithnre 
qui s’execute et qui s’adapte a la dynanricite courante sans pour autant avoir un nrecanisnre de 
detection de la dynanricite. 

La surete du rassemblenrent impose que tous les robots finissent leur execution sur le nrenre 
nceud, et la vivacite de ce probleme impose que tous les robots finissent en temps fini et borne. Les 
problenres plus faibles que nous proposons degradent la vivacite du rassemblenrent et conservent 
sa surete. Plus precisenrent, nous affaiblissons le probleme du rassemblenrent tel que au plus un 
robot peut ne pas terminer son execution ou (non exclusif) tous les robots qui ternrinent le font 
en temps fini (nrais non borne). 

Ainsi, nous proposons 3 variantes du rassemblenrent: le rassemblenrent ultinre (ou tous les 
robots ternrinent leur execution sur le nrenre nceud du graphe en temps fini), le rassemblenrent 
faible (au nroins tous les robots sauf un ternrinent leur execution sur le nrenre nceud du graphe en 
temps fini et borne), et le rassemblenrent faible ultinre (au nroins tous les robots sauf un ternrinent 
leur execution sur le nrenre nceud du graphe en temps fini). Chacune des ces variantes preserve 
la surete du rassemblenrent et garantit qu’au nroins tous sauf un robots ternrinent (ultinrenrent 
ou en temps borne, en fonction de la variante du rassemblenrent consideree) leur execution sur le 
nrenre nceud de l’anneau. 

Notre algorithnre resout le rassemblenrent dans les anneaux B1Z£ et ST , le rassemblenrent 
ultinre dans les anneaux 1Z£, le rassemblenrent faible dans les anneaux AC et le rassemblenrent 
faible ultinre dans les anneaux COT. Les proprietes definissant le type d’un graphe dynanrique 
ne peuvent etre verifiees que de nraniere ultinre, ainsi une des diffrcultes d’un tel algorithnre est 
de reussir a resoudre la bonne version du rassemblenrent sans etre capable de detecter le type 
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rassemblement 

rassemblement ultime 

rassemblement faible 

rassemblement faible ultime 

COT 

Impossible 

Impossible 

Impossible 

Possible 

AC 

Impossible 

Impossible 

Possible 

— 

ns 

Impossible 

Possible 

Impossible 

— 

BUS 

Possible 

— 

— 

— 

ST 

Possible 

— 

— 

— 


Table B.l: Resume de nos resultats. Le symbole — signifie qu’une variante plus forte du prob¬ 
leme est deja resolue sous les hypotheses de dynamicite. Notre algorithme est progressivement 
degradant vu qu’il resout chaque variante du rassemblement des que les hypotheses de dynamicite 
le permettent. 


de graphes dynamiques dans lequel il est execute. Parrni les types d’anneaux dynamiques que 
nous etudions, certains peuvent avoir des aretes manquantes a terme, ce qui ajoute des difficultes 
dans la maniere d’apprehender le probleme du rassemblement en fonction du type de graphes 
dynamiques considere. 

Pour fonctionner notre algorithme a besoin d’au moms 4 robots. Ces robots sont synchrones, 
connaissent la taille de l’anneau, et le nornbre total de robots dans le systeme. Chaque robot 
possede un identifiant (positif) distinct. Initiallement, un robot ne connait que la valeur de son 
identifiant. Les robots sont capables de communiquer en lisant les valeurs des variables des robots 
qui sont situes sur le meme nceud qu’eux. Ils possedent la detection de la multiplicity forte (ils 
sont capables de connaitre le nornbre exact de robots situes sur le meme nceud qu’eux). Ils ont 
la meme chiralite (ils ont acces a la meme numerotation des ports sur les nceuds, leur permettant 
alors d’avoir la meme orientation dans l’anneau). Notre algorithme a besoin de tels robots pour 
fonctionner correctement, cependant la necessity de ces hypotheses reste une question ouverte. 

Nous avons egalement prouve que notre algorithme resout la meilleure version du rassemble¬ 
ment (parrni celles que nous considerons) dans les graphes dynamiques que nous etudions, notarn- 
rnent en prouvant, sous les hypotheses presentees ci-dessus, une serie de resultats d’impossibilite 
que nous resumons dans le Tableau B.l. Ainsi en plus d’etre progressivement degradant, nous 
pouvons qualifier notre algorithme de progressivement degradant de maniere optimale. 

Cependant, cela ne signifie pas qu’il n’existe pas un algorithme satisfaisant des variantes plus 
fortes du rassemblement parrni l’infinite de versions de ce probleme qu’il est possible de pro¬ 
poser. Nous pouvons qualifier d’optimum un algorithme progressivement degradant resolvant le 
rassemblement s’il resout les meilleures versions du rassemblement dans les types de graphes dy¬ 
namiques analyses. Une question ouverte interessante a creuser est de savoir si un tel algorithme 
existe. 

De meme, sans considerer le probleme du rassemblement, etudier des algorithmes progres¬ 
sivement degradants optimums semble etre une tache ardue. 

B.3 Approche speculative 

II n’existe pas d’algorithme speculatif utilisant des robots. Nous avons choisi de nous in- 
teresser au probleme de l’exploration afin de proposer une approche speculative a ce probleme 
dans les graphes dynamiques. 

Etat de l’art. II existe dans la litterature des algorithmes resolvant l’exploration dans des 
graphes dynamiques (mais comrne indique, ils ne sont pas speculates vu qu’ils etudient le prob¬ 
leme dans un type de graphes dynamiques precis). Parrni ces algorithmes, certains considerent 
que les robots connaissent la dynamique du graphe : ils savent quelles aretes sont presentes 
et a quels instants. C’est notamment le cas de Ilcinkas et Wade [106] qui se sont interesses a 
l’exploration dans des anneaux T-intervalle connectes (qui sont des graphes dynamiques tels que 
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a chaque instant de temps les aretes presentes torment un graphe connexe et pour tout intervalle 
de temps de taille T, un sous-ensemble des aretes presentes torment le rnerne arbre couvrant), et 
de Ilcinkas et al. [104] qui ont etudie l’exploration dans des cactus (arbres de cycles) T-intervalle 
connectes. D’autres articles par contre considerent que les robots n’ont pas de connaissance quant 
a la dynamique du graphe. Parrni ces algorithmes, ceux de Flocchini et al. [89, 88, 87], et de Wade 
et Ilcinkas [105] resolvent le probleme de l’exploration avec arret (ou les robots doivent explorer 
le graphe en temps fini et doivent arreter leur execution egalement en temps fini une fois qu’ils 
ont detecte qu’ils avaient explore le graphe) dans des graphes periodiques (graphes dynamiques 
dans lesquels les aretes sont presentes de maniere periodique). Ilcinkas et Wade [106] ont etudie 
l’exploration dans des anneaux BTZS et T-intervalle connectes, i.e., rnerne si au plus une arete de 
l’anneau peut etre manquante a chaque instant de temps, chaque arete est au rnoins presente une 
fois toutes les 5 unites de temps. Flocchini et al. [86] ont considere le probleme de l’exploration 
avec arret dans des graphes AC particulars ou lorsqu’une arete disparait elle ne reapparait ja¬ 
mais. Di Luna et al. [125] ont eux etudie l’exploration avec arret des anneaux AC. Finalement, 
Gotoh et al. [99] ont analyse l’exploration avec arret de tori (grille ou chaque noeud extremite 
est adjacent au noeud extremite oppose de la rnerne ligne ou colonne de la grille, si il existe) ou 
chaque anneau est un graphe AC. 

Nos resultats. Nous nous sornmes interesses au probleme de l’exploration perpetuelle, et nous 
avons fourni des algorithmes speculates a ce probleme en considerant des robots non sujets aux 
fautes, ainsi que des robots sujets aux fautes transitoires. 

Sans faute. Bien que le probleme de l’exploration ait ete etudie massivement dans les 
graphes statiques, et aussi dans les graphes dynamiques, il n’a jamais ete etudie dans les graphes 
dynamiques COT. Dans les anneaux COT, le temps de couverture (pire temps du temps minimal 
pris par les robots pour explorer au rnoins une fois chaque noeud de l’anneau depuis n’importe quel 
temps de toutes les executions possibles de leur algorithme) est non borne vu qu’il est possible 
dans ce type d’anneau d’avoir toutes les aretes manquantes et cela pendant un temps arbitraire- 
rnent long. Cela motive la conception d’algorithmes speculates resolvant l’exploration perpetuelle 
dans les graphes dynamiques. 

Dans un premier temps, nous nous sornmes interesses au probleme de l’exploration perpetuelle 
dans les anneaux COT. Nous avons considere des robots avec peu de capacites evoluant dans ce 
type de graphes dynamiques : ils sont anonymes (n’ont pas d’identifiant), synchrones, n’ont pas la 
rnerne chiralite (les robots n’ont pas necessairement acces a une numerotation des ports commune, 
ils ne peuvent done pas s’orienter dans l’anneau grace a une telle numerotation), ils n’ont aucune 
connaissance sur le graphe (ni la taille, ni la dynamicite, etc.), ils ne peuvent pas communiquer 
de maniere directe, ils ont la detection de la multiplicite faible (un robot est capable de savoir s’il 
est seul ou non sur son noeud, rnais ne peut pas connaitre le nornbre exact de robot situe sur le 
rnerne noeud que lui). 

Sous ces hypotheses, nous avons caracterise le nornbre necessaire et suffisant de robots per- 
mettant de resoudre le probleme de l’exploration perpetuelle. Nous avons rnontre que 2 robots ne 
peuvent pas resoudre l’exploration perpetuelle dans les anneaux COT de tailles 4 ou plus, et que 
1 robot ne peut pas resoudre l’exploration perpetuelle dans les anneaux COT de tailles 3 ou plus. 
Les resultats obtenus sont resumes dans le Tableau B.2. En fonction de ces resultats, nous avons 
fourni des algorithmes pour montrer que le nornbre necessaire de robots est egalement suffisant 
pour explorer de maniere perpetuelle les anneaux COT. Notre algorithme utilisant un nornbre de 
robots superieur ou egal a 3 est speculatif. En effet, il resout l’exploration perpetuelle dans les 
anneaux COT, et est optimise pour les anneaux ST : son temps de couverture dans les anneaux 
COT n’est pas borne, rnais il est borne et rnerne asymptotiquement optimal dans les anneaux 
ST (son temps de couverture pour les anneaux ST est en @(n — R ) unites de temps, ou n est la 
taille de l’anneau et 7 Z est le nornbre de robots dans le systeme). 
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Nombre de robots 

Taille des anneaux 

Resultats 

3 et plus 

> 4 

Possible 

2 

> 3 

Impossible 

= 3 

Possible 

1 

> 2 

Impossible 


Table B.2: Resume des resultats en considerant des robots non sujets aux fautes. 


Avec faute. Dans le paragraphe precedent, nous avons presente des resultats avec des 
robots possedant de faibles capacites. Moins les robots ont de capacites moins ils sont sujets 
aux fautes (vu que les capacites des robots sont induites par des mecanismes qui peuvent tomber 
en panne). Cependant, bien que les robots aient peu de capacites, ils peuvent tout de meme 
etre sujets a des fautes. Dans ce paragraphe, nous etudions en particular des robots pouvant 
etre sujets a des fautes transitoires qui sont des fautes arbitrages telles qu’il existe un temps a 
partir duquel elles ne sont plus presentes. Les algorithmes qui tolerent les fautes transitoires sont 
dits auto-stabilisants : un algorithme auto-stabilisant est defini par Dijkstra [73] comme etant 
un algorithme qui retrouve un comportement correct en temps fini quelque soit la configuration 
initiale du systeme (qui capture les effets des fautes transitoires dans le systeme). Quand un 
algorithme auto-stabilisant utilise des robots, ces robots sont egalement dits auto-stabilisants. 
Les algorithmes auto-stabilisants sont des algorithmes puissants puisqu’ils resolvent le probleme 
etudie rnerne apres que de gros dommages aient eu lieu dans le systeme. II n’y a aucun algorithme 
auto-stabilisant qui resolve le probleme de l’exploration ni dans les graphes statiques ni dans les 
graphes dynamiques. 

Comme indique, un algorithme auto-stabilisant doit resoudre le probleme etudie quelque soit 
la configuration initiale du systeme. Ainsi, pour etre auto-stabilisant un algorithme d’exploration 
perpetuelle doit tolerer n’importe quelle position initiale des robots. En particular, il doit tolerer 
que tous les robots commencent leur execution sur le rnerne noeud. Si plusieurs robots non iden¬ 
tifies commencent leur execution sur le rnerne noeud, par determinisme, ils vont se comporter 
comme un seul et meme robot. Or, comme indique dans le paragraphe precedent, il n’est pas 
possible de resoudre le probleme de l’exploration perpetuelle dans les anneaux COT avec un seul 
robot. Ainsi, pour resoudre le probleme de l’exploration perpetuelle de maniere auto-stabilisante 
les robots doivent etre dotes d’identifiants distincts. 

Nous nous sommes interesses au probleme de l’exploration perpetuelle utilisant des robots 
auto-stabilisants. Nous avons tout d’abord considere ce probleme pour des robots evoluant dans 
les anneaux COT . Les robots auto-stabilisants que nous utilisons ont les capacites suivantes 
: ils sont synchrones, ils n’ont pas la meme chiralite, ils ont des identifiants distincts mais ne 
connaissent que leur propre identifiant, ils n’ont pas de connaissance du graphe dynamique, ils ne 
peuvent pas communiquer directement, ils sont dotes de la detection de la multiplicite forte (ils 
sont capables de connaitre le nombre exact de robots qui se situent sur le meme noeud qu’eux). 
Vu que se sont des robots auto-stabilisants, leur memoire persistante est divisee en deux parties 
: une corruptible contenant les variables et une incorruptible contenant les constantes (telles que 
leur identifiant) et leur code. 

De la meme maniere que precedemment, sous les hypotheses citees ci-dessus, nous avons 
caracterise le nombre necessaire et sufhsant de robots auto-stabilisants permettant de resoudre 
le probleme de l’exploration perpetuelle. Nous avons rnontre que 2 robots ne peuvent pas re¬ 
soudre l’exploration perpetuelle dans les anneaux de tailles 4 ou plus, et que 1 robot ne peut 
pas resoudre l’exploration perpetuelle dans les anneaux de tailles 3 ou plus. Les resultats de 
necessity montres ici ne sont pas impliques par ceux considerant des robots sans faute qui eux 
n’ont pas d’identifiants. Les resultats obtenus sont resumes dans le Tableau B.3. En fonction 
de ces resultats, nous avons fourni des algorithmes pour montrer que le nombre necessaire de 
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Nornbre de robots 

Taille des anneaux 

Resultats 

3 

> 4 

Possible 

2 

> 3 

Impossible 

= 3 

Possible 

1 

> 2 

Impossible 


Table B.3: Resume des resultats en considerant des robots sujets aux fautes transitoires. 


robots auto-stabilisants est egalement suffisant pour explorer de maniere perpetuelle les anneaux 
COT . Notre algorithme utilisant un nornbre de robots egal a 3 est speculatif. En effet, il resout 
l’exploration perpetuelle dans les anneaux COT , et est optimise pour les anneaux ST : son temps 
de couverture dans les anneaux COT n’est pas borne, rnais il est borne et rnerne asymptotique- 
rnent optimal dans les anneaux ST (son temps de couverture pour les anneaux ST est en @(n) 
unites de temps, ou n est la taille de l’anneau). 

Nous pouvons noter que nos deux algorithmes speculates (celui utilisant des robots sans 
faute, comme celui utilisant des robots sujets aux fautes transitoires) sont speculates de maniere 
optimale : ils fournissent le meilleur temps de couverture parrni ceux proposes (non borne et 
borne) dans les anneaux ST et COT- 

Cependant, cette definition d’algorithmes speculatifs de maniere optimale n’exclut pas la 
possibility qu’un algorithme soit speculatif optimal sans pour autant resoudre le probleme etudie 
avec les meilleures performances possibles. Nous pouvons alors qualifier un algorithme speculatif 
d’optimum s’il resout le probleme etudie avec les meilleures performances possibles dans chacun 
des types de graphes dynamiques consideres. Analyser de tels algorithmes semble etre une future 
tache attrayante. 

B.4 Conclusion 

Dans cette these nous avons applique les approches progressivement degradante et specula¬ 
tive aux reseaux de robots evoluant dans des graphes dynamiques. Pour cela, nous avons etudie 
le rassemblement de maniere progressivement degradante et l’exploration perpetuelle de maniere 
speculative. De multiple perspectives peuvent etre envisagees, notamment il serait interessant 
de trouver de nouvelles mesures de complexities (en temps et en terrne de mouvements) pouvant 
s’appliquer aux reseaux de robots evoluant dans des graphes dynamiques pour ameliorer la con¬ 
ception d’algorithmes speculatifs utilisant de tels robots. Aussi, une perspective qui pourrait etre 
envisagee serait de combiner les approches progressivement degradante et speculative. En effet, il 
serait interessant d’etudier l’aspect speculatif d’un algorithme progressivement degradant : pour 
chaque ensemble de types de graphes dynamiques dans lesquels un algorithme progressivement 
degradant resout un certain probleme, l’optimiser pour le type de graphes dynamiques ou il sera 
le plus sou vent execute. 
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